ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Ethereal-dev: Re: [Ethereal-dev] New dissector: packet-retix-bpdu.c

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Tue, 01 Mar 2005 13:59:12 -0800
Giles Scott wrote:

I came across a packet trace with Retix spanning tree packets in it.
So here is a quick hack at a dissector for it.
Several fields are not decoded but maybe someone knows what they are?

It uses llc.dsap && llc.ssap == 0x80,

Those are listed as "XNS" - and I've seen a capture with Token Ring packets with those DSAP and LSAP values containing what appears to be SMB traffic - perhaps some SMB-over-IPX variant?

Perhaps there's some way to distinguish between those two?