Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Ethereal-dev: Re: [Ethereal-dev] WTAP_ENCAP_FRELAY

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Fri, 2 Jul 2004 00:37:45 -0700
On Wed, Jun 30, 2004 at 10:47:03PM -0400, Nisbet, Tom wrote:
> It appears as though the traffic is really using a two octet address field
> but is setting the EA bits incorrectly.

Or it's Cisco HDLC traffic that was captured by a WanBook incorrectly
configured for Frame Relay rather than Cisco HDLC; the frames start with
0x0f 0x00, followed by an Ethernet type, and that looks like Cisco HDLC.