Re: [tcpdump-workers] Request for DLT value

2017-04-05 Thread Guy Harris
On Apr 4, 2017, at 10:53 PM, Selvig, Bjorn wrote: > This header is for support of TI boards as sniffer adapter (LAUNCHXL boards) > for low power wireless protocols like BLE, 802.15.4 or TI proprietary > protocols. So there are two ways of handling this: 1) a single

Re: [tcpdump-workers] Request for DLT value

2017-04-04 Thread Selvig, Bjorn
, Norway. Org. NO 980499480 MVA -Original Message- From: Guy Harris [mailto:g...@alum.mit.edu] Sent: 4. april 2017 18:32 To: Selvig, Bjorn Cc: tcpdump-workers@lists.tcpdump.org Subject: Re: [tcpdump-workers] Request for DLT value On Apr 4, 2017, at 5:02 AM, Selvig, Bjorn <b.sel...@ti.com>

Re: [tcpdump-workers] Request for DLT value

2017-04-04 Thread Selvig, Bjorn
-Original Message- From: Michael Richardson [mailto:m...@sandelman.ca] Sent: 4. april 2017 15:56 To: Selvig, Bjorn Cc: tcpdump-workers@lists.tcpdump.org Subject: Re: [tcpdump-workers] Request for DLT value Selvig, Bjorn <b.sel...@ti.com> wrote: > I am working on a new header format

Re: [tcpdump-workers] Request new DLT value for Infiniband link

2012-11-11 Thread Guy Harris
On Nov 11, 2012, at 4:53 AM, Oren Kladnitsky or...@mellanox.com wrote: I'd like to request a new DLT/LINKTYPE value for Infiniband traffic (DLT_INFINIBAND). Infiniband spec is available at: http://members.infinibandta.org/kwspub/spec/V1r1_2_1.Release_12062007.zip (registration required).

Re: [tcpdump-workers] Request new DLT value for raw fibre channel

2009-07-23 Thread Guy Harris
On Jul 23, 2009, at 12:03 AM, Guy Harris wrote: On Jul 22, 2009, at 1:36 PM, kahou lei wrote: We are currently supporting: SOFi2 - BCB5 ... Also, does, for example, BCB5 mean that the 4 bytes in the SOF are, in order, 0xBC 0xB5 0x55 0x55, so that the first byte of

Re: [tcpdump-workers] Request new DLT value for raw fibre channel

2009-07-23 Thread kahou lei
We will put EOF as well. The decoding is correct, we have 4 bytes SOF, first byte is 0xBC , second byte is 0xB5 and so on. Thanks, Kahou On Thu, Jul 23, 2009 at 2:06 AM, Guy Harris g...@alum.mit.edu wrote: On Jul 23, 2009, at 12:03 AM, Guy Harris wrote: On Jul 22, 2009, at 1:36 PM, kahou

Re: [tcpdump-workers] Request new DLT value for raw fibre channel

2009-07-23 Thread Guy Harris
On Jul 23, 2009, at 9:45 AM, kahou lei wrote: We will put EOF as well. The decoding is correct, we have 4 bytes SOF, first byte is 0xBC , second byte is 0xB5 and so on. OK, I've assigned 225 as DLT_FC_2_WITH_FRAME_DELIMS. - This is the tcpdump-workers list. Visit

Re: [tcpdump-workers] Request new DLT value for raw fibre channel

2009-07-22 Thread kahou lei
In this case, can you assign me one more value for FC with SOF? The reason is that our module can send out two type of packets: One with SOF, one without SOF. I will add one dissector in wireshark to support FC with SOF (If it doesn't exist). Thanks, Kahou On Thu, Jul 16, 2009 at 2:30 AM, Guy

Re: [tcpdump-workers] Request new DLT value for raw fibre channel

2009-07-22 Thread Guy Harris
On Jul 22, 2009, at 11:17 AM, kahou lei wrote: In this case, can you assign me one more value for FC with SOF? The reason is that our module can send out two type of packets: One with SOF, one without SOF. So what are the contents of the 4 bytes of SOF? - This is the tcpdump-workers list.

Re: [tcpdump-workers] Request new DLT value for raw fibre channel

2009-07-22 Thread Guy Harris
On Jul 22, 2009, at 12:21 PM, Guy Harris wrote: On Jul 22, 2009, at 11:17 AM, kahou lei wrote: In this case, can you assign me one more value for FC with SOF? The reason is that our module can send out two type of packets: One with SOF, one without SOF. So what are the contents of the

Re: [tcpdump-workers] Request new DLT value for raw fibre channel

2009-07-22 Thread kahou lei
It is not base on RFC 3643. We are following the standard from http://www.t11.org . You can find the draft in Fibre Channel (FC) - FC-FS-3 Fibre Channel - Framing and Signaling - 3INCITS Project 1861-D. Basically, we are following Table 4 Valid Data Characters (Section 5.14) and Table 7 Frame

Re: [tcpdump-workers] Request new DLT value for raw fibre channel

2009-07-16 Thread Guy Harris
On Jul 15, 2009, at 6:41 PM, kahou lei wrote: Just curious, if the FC packet has 4 bytes SOF in front of R_CTL, can I use the same value? No; DLT values must unambiguously specify the link-layer encapsulation, so a different DLT value should be used. - This is the tcpdump-workers list.

Re: [tcpdump-workers] Request new DLT value for raw fibre channel

2009-07-15 Thread kahou lei
Thanks for assigning a new value. Just curious, if the FC packet has 4 bytes SOF in front of R_CTL, can I use the same value? Thanks, Kahou On Fri, Jul 3, 2009 at 5:11 PM, Guy Harris g...@alum.mit.edu wrote: On Jun 29, 2009, at 6:35 PM, kahou lei wrote: Yes, the packet starts with the

Re: [tcpdump-workers] Request new DLT value for raw fibre channel

2009-07-03 Thread Guy Harris
On Jun 29, 2009, at 6:35 PM, kahou lei wrote: Yes, the packet starts with the R_CTL field. OK, so I've assigned 224 to DLT_FC_2 (as it's for Fibre Channel FC-2 frames). - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.

Re: [tcpdump-workers] Request new DLT value for raw fibre channel

2009-06-29 Thread Guy Harris
On Jun 24, 2009, at 9:50 AM, kahou lei wrote: I would like to request a new DLT value for raw fibre channel. I am currently working on wireshark to dissect raw fibre channel packet in data link layer. So does raw fibre channel packet mean a packet beginning with the Frame_Header, e.g.

Re: [tcpdump-workers] Request new DLT value for raw fibre channel

2009-06-29 Thread kahou lei
Yes, the packet starts with the R_CTL field. Basically my company is making a fibre channel module which can generate fibre channel packet on the transmit side and we have functionality to capture the packet on the receive side, this is done on the hardware level. On the software level, we can

Re: [tcpdump-workers] Request for DLT value for Raw LAPD

2007-10-21 Thread Guy Harris
Varuna De Silva wrote: Yes, Exactly. This is the version LAPD running between two, PABX's. OK, I've assigned the value 203 to DLT_LAPD. Note that the packet data starts with the 2 address octets means that the packet contains no indication of whether it's a user-to-network or

Re: [tcpdump-workers] Request for DLT value for Raw LAPD

2007-10-20 Thread Varuna De Silva
Hello, On 10/20/07, Guy Harris [EMAIL PROTECTED] wrote: On Oct 18, 2007, at 9:32 PM, Varuna De Silva wrote: Hello, We are trying to decode raw LAPD messages tapped from a E1 line, with wireshark. So you're getting, for example, one of the E1's timeslots, which has an ISDN D channel

Re: [tcpdump-workers] Request for DLT value for Raw LAPD

2007-10-19 Thread Guy Harris
On Oct 18, 2007, at 9:32 PM, Varuna De Silva wrote: Hello, We are trying to decode raw LAPD messages tapped from a E1 line, with wireshark. So you're getting, for example, one of the E1's timeslots, which has an ISDN D channel on it? And the packet data starts with the 2 address