https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5927
--- Comment #4 from Tyson Key <tyson.key@xxxxxxxxx> 2011-05-17 08:23:58 PDT ---
Created an attachment (id=6360)
--> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=6360)
A version of the patch which dissects the Block Header and Frame Pointer Table,
and part of the first frame
This revision also fixes the nested subtrees problems that I was facing, and
adds the beginnings of support for dissection of "frames" (although only the
frame index and frame length bytes of the first frame are dissected).
It appears that the specification supports aggregating 2+ frames into a single
ENCM packet, which means that it'll eventually be necessary to switch to using
an iterative approach of extracting frames - although I've only ever seen
packets containing a single frame in my traces.
I still need to figure out what the encapsulated data consists of (I initially
suspected that it was just raw IPv4 packets from looking at magic numbers -
although I wouldn't be surprised if there isn't either Ethernet or proprietary
headers involved); and then find a way to integrate with the appropriate
dissectors.
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
