Wireshark-dev: Re: [Wireshark-dev] New dissector: Veritas Low Latency Transport (LLT)
From: "ronnie sahlberg" <[email protected]>
Date: Fri, 18 Aug 2006 08:47:03 +0000
checked in to 18944 with some changes

On 8/17/06, Stephen Fisher <[email protected]> wrote:
Attached is a patch file that adds a new dissector for the LLT protocol
(Veritas Low Level Transport, used for server clustering).  They use
ethertype 0xCAFE even though it isn't assigned to them :(.  There are
other fields and possibly other message types directly between servers
it does not yet dissect as no one outside of Veritas knows what they
are.  This dissector understands the one people will run across most -
multiple servers broadcasting these heartbeats all over the place.  I
figured out these fields through many Internet searches.

I will add the protocol to the Wiki after it is committed.