Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 5244] Add Dissector for ERSPAN Type-III Header

Date: Thu, 23 Sep 2010 10:36:03 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5244

Jason Masker <jason@xxxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Attachment #5207|                            |review_for_checkin?
               Flag|                            |

--- Comment #13 from Jason Masker <jason@xxxxxxxxxx> 2010-09-23 10:35:59 PDT ---
Created an attachment (id=5207)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=5207)
Add Direction field to ERSPAN Type-III header

This patch adds the Direction field for the newer type-III (version 2 on the
wire) header and splits the Unknown4 field into Unknown5 & Unknown4.

I am unsure how to address the difference I see in the position of the
Direction field for a 'header-type 2' capture from a 1000v and what I see from
a 6500. Both indicate version 1 in the header and another way of telling these
apart is not immediately obvious. I'll try to upload a couple sample captures.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.