Wireshark-bugs: [Wireshark-bugs] [Bug 7314] SDH support for wireshark.
Date: Wed, 6 Jun 2012 03:33:09 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7314

--- Comment #5 from Guy Harris <[email protected]> 2012-06-06 03:33:09 PDT ---
According to my copy of Endace's "ERF Types" document (EDM11-01v10),
TYPE_RAW_LINK records in an ERF file (or, presumably, packets in a LINKTYPE_ERF
pcap file or for a LINKTYPE_ERF interface in a pcap-ng file) appear to include
an Extension Header 5; that extension header includes:

    a "start of frame"/"more fragmentation" bit;

    a sequence number field;

    an encoding of the rate (OC-3, OC-12, OC-48, or OC-192);

    an indication of whether this is SONET or SDH.

Presumably if that header is present the preference for the rate isn't
necessary.  Will a subsequent patch export the data in the Extension Header 5
from the ERF dissector, e.g. using a pseudo-header?

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.