Re: [tcpdump-workers] IP length vs IP6 length inconsistency (fwd)

2007-08-07 Thread Pekka Savola
On Tue, 7 Aug 2007, Hannes Gredler wrote: Is the length intended to print out the whole IP packet length (which in the case of v6 would probably require chasing down the extension header chain) or whatever IP header's "next header length" reports? its works the other way around ... you get p

Re: [tcpdump-workers] DLT assignment request

2007-08-07 Thread Stephen Donnelly
On Tue, 2007-08-07 at 16:55 -0700, Guy Harris wrote: > On Jul 25, 2007, at 1:57 PM, Stephen Donnelly wrote: > > > Florent Drouin from Alcatel-Lucent has been working on improving the > > ERF > > support in Wireshark. As part of this work we would like to request a > > new DLT (DLT_ERF) which wou

Re: [tcpdump-workers] Tcpdump web down?

2007-08-07 Thread Guy Harris
On Aug 6, 2007, at 1:59 PM, Gianluca Varenni wrote: I agree with you. The server is either really slow or completely down. Router problem. It's back. - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.

Re: [tcpdump-workers] DLT Request

2007-08-07 Thread Guy Harris
On Jul 31, 2007, at 7:43 PM, Phil Mulholland wrote: I'd like to request a new DLT value for our internal header format. We have a patched version of libpcap that can capture packets from our custom board. The board can optionally attach it's own header to the packets, before the Ethernet h

Re: [tcpdump-workers] DLT assignment request

2007-08-07 Thread Guy Harris
On Jul 25, 2007, at 1:57 PM, Stephen Donnelly wrote: Florent Drouin from Alcatel-Lucent has been working on improving the ERF support in Wireshark. As part of this work we would like to request a new DLT (DLT_ERF) which would encapsulate a single ERF record of any ERF type. DLT_ERF would b

Re: [tcpdump-workers] IP length vs IP6 length inconsistency (fwd)

2007-08-07 Thread Hannes Gredler
hi pekka, Pekka Savola wrote: Hi, In tcpdump 3.9.7 (Fedora 7) but seeing the same on FreeBSD, I noticed that on a similarly generated TCP packet, IPv4 output differs from IPv6 in that "length" in v4 includes the IP header length, but in v6 it does not. There are differences as to how next-

[tcpdump-workers] IP length vs IP6 length inconsistency (fwd)

2007-08-07 Thread Pekka Savola
Hi, In tcpdump 3.9.7 (Fedora 7) but seeing the same on FreeBSD, I noticed that on a similarly generated TCP packet, IPv4 output differs from IPv6 in that "length" in v4 includes the IP header length, but in v6 it does not. There are differences as to how next-headers are chained in v4 vs v6.