Wireshark · Wireshark-dev: Re: [Wireshark-dev] Ethernet header below MPLS...

[Roland Knall <rknall@xxxxxxxxx>]

On how he did that, Wireshark dissectors can attach each other to dissect payloads if they apply for them. So in this case, the MPLS dissector has a hook, to which either the ETH dissector has attached or was called by the MPLS dissector.

-

Roland

On Fri, Sep 16, 2016 at 3:03 AM, Guy Harris <guy@xxxxxxxxxxxx> wrote:

On Sep 15, 2016, at 4:13 PM, barcaroller <barcaroller@xxxxxxxxx> wrote:

> I would not expect to see an Ethernet header right below an MPLS header.

See

        https://tools.ietf.org/html/rfc4448

which is called "Encapsulation Methods for Transport of Ethernet over MPLS Networks".

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request@wireshark.org?subject=unsubscribe