Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-dev: [Wireshark-dev] [PATCH] Read VPI/VCI/CID information from K12xx .rf5 with extra_len == 0

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: Kriang Lerdsuwanakij <lerdsuwa@xxxxxxxxxxxxxxxxxxxxx>
Date: Thu, 01 Feb 2007 23:43:46 +0700

Hello

I discovered that Wireshark K12xx detects the type of input (E1 timeslot or ATM) based on the extra information. My previous patch to enable Wireshark to open K12xx files with no extra information (extra_len equals 0 in SRCDEST record)
failed to give later dissectors the input type.

Attached is the patch to correct this for ATM PVC. It adds VPI/VCI/CID information for display in the dissected tree (in k12_open function). k12_read and k12_seek_read
are also made more robust. These are reverse engineered based on hexeditor
and constants found in tektronix configuration file. Please apply the patch.

Best regards

Kriang Lerdsuwanakij

Attachment: patch-k12-pvc.gz
Description: GNU Zip compressed data

  • Follow-Ups:
    • Re: [Wireshark-dev] [PATCH] Read VPI/VCI/CID information from K12xx .rf5 with extra_len == 0
      • From: Luis Ontanon
  • Prev by Date: [Wireshark-dev] Problem with proto_tree_add_item
  • Next by Date: Re: [Wireshark-dev] Controlling Tshark output format
  • Previous by thread: Re: [Wireshark-dev] Problem with proto_tree_add_item
  • Next by thread: Re: [Wireshark-dev] [PATCH] Read VPI/VCI/CID information from K12xx .rf5 with extra_len == 0
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation