Wireshark · Ethereal-dev: Re: [Ethereal-dev] Firestorm Network Intrusion Detection support for Ethereal

[John Leach <john@xxxxxxxxxxxxxxx>]

hatype and prototype actually seem to be in network order. I would have
expected the protocol type to be anyway.

I'll double check this with some elog captures from a PowerPC on my
Intel.

John.

> Also, in packet-mmsll.c, the dissector tries to infer the byte order of
> the interface index (as it's presumably just raw data from the Linux
> kernel, and thus in the byte order of the host that wrote the file), but
> it neither tries to infer the byte order of, for example, the hatype or
> prototype fields nor use the inferred interface-index byte order to
> interpret those fields.  Make sure you test this by capturing on a machine
> with one byte order and reading the resulting file on a machine with a
> different byte order.
> 
-- 
GPG KEY: B89C D450 5B2C 74D8 58FB A360 9B06 B5C2 26F0 3047
   HTTP: http://www.johnleach.co.uk

Attachment: signature.asc
Description: This is a digitally signed message part