Wireshark-bugs: [Wireshark-bugs] [Bug 7314] SDH support for wireshark.
Date: Thu, 7 Jun 2012 18:38:17 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7314

--- Comment #6 from [email protected] 2012-06-07 18:38:17 PDT ---
(In reply to comment #5)
> According to my copy of Endace's "ERF Types" document (EDM11-01v10),
> TYPE_RAW_LINK records in an ERF file (or, presumably, packets in a LINKTYPE_ERF
> pcap file or for a LINKTYPE_ERF interface in a pcap-ng file) appear to include
> an Extension Header 5; that extension header includes:
> 
>     a "start of frame"/"more fragmentation" bit;
> 
>     a sequence number field;
> 
>     an encoding of the rate (OC-3, OC-12, OC-48, or OC-192);
> 
>     an indication of whether this is SONET or SDH.
> 
> Presumably if that header is present the preference for the rate isn't
> necessary.  Will a subsequent patch export the data in the Extension Header 5
> from the ERF dissector, e.g. using a pseudo-header?

Hmmm, thanks for that. Yes that's correct. I was going to pretend that someone
with may want to read SONET/SDH from a pcap file, so when I started
implementing the dissector I didn't want to utilise anything ERF specific. I'm
doubtful as to ever finding a pcap file with SONET traffic though so I'll
probably include your proposed change in the next patch anyway.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.