Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 2671] ERF dissector defaults to RAW

Date: Sun, 13 Jul 2008 22:07:08 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2671





--- Comment #8 from Stephen Donnelly <stephen@xxxxxxxxxx>  2008-07-13 22:07:08 PDT ---
(In reply to comment #6)

Works for me, thanks. Solves the main issue of Ethernet traces not being
decoded sensibly by default (was raw).

> NOTE: if the capturing hardware and software know whether the FCS is present,
> there should be a flag somewhere in the ERF header to indicate whether it's
> present, so you don't have to tell software reading a capture whether it's
> present or not.

I agree that would be useful, it appears to be an oversight in the format.

> If you have any captures with AAL2 packets in them, could you either add them
> as attachments or send them to me, so I can try to get the ATM dissector to
> handle them?  Then we'd have dissectors capable of handling ERF_TYPE_ATM,
> ERF_TYPE_AAL2, and ERF_TYPE_AAL5, and can set the ERF dissector up to call
> them.

I will see what I can find and contact you directly.


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.