Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Ethereal-dev: RE: [Ethereal-dev] WTAP_ENCAP_FRELAY

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Nisbet, Tom" <Tnisbet@xxxxxxxxxxxxxxxxxx>
Date: Thu, 1 Jul 2004 10:22:34 -0400
> On Wed, Jun 30, 2004 at 10:47:03PM -0400, Nisbet, Tom wrote:
> > Someone at the frame relay forum eventually noticed that 
> there is no such
> > thing as a one octet frame relay address field, so they 
> stole this bit
> > in the first octet to indicate frame relay fragmentation, as defined
> > in FRF.12.  The Sniffer is trying to decode this.
> 
> ...and Ethereal, unfortunately, isn't.  That should probably 
> be changed.

I can add support for FRF.12 when I get my Ethereal build environment
working again.  It won't help in this case because the frames aren't really
FRF.12.  They just look like two octet headers with bad EA bits.

Tom