Re: [tcpdump-workers] Request for new LINKTYPE/DLT ZBOSS_NCP

[Eugene Exarevsky via tcpdump-workers]

--- Begin Message ---

Hi!

Sorry for the late replay. There were holidays in Russia, so I was out 
of Internet connection.

Could you define what must be described to define the header type well?

On 1/10/2022 1:19 AM, Denis Ovsienko wrote:

On Tue, 2 Nov 2021 09:46:30 +0300
Eugene Exarevsky via tcpdump-workers
  wrote:


Hi all,

Please, allocate a new LINKTYPE/DLT called ZBOSS_NCP.

The background is following: we (DSR) are developing Zigbee protocol
stack ZBOSS (
The stack has serial commands interface - NCP.
We implemented a dissector of that NCP protocol for Wireshark and
want to publish it. The idea is that we can display NCP commands and
Zigbee traffic between the stack and Zigbee transceiver in the same
log. But, indeed, NCP serial protocol is not related to 802.15.4
itself, so it will be wrong to base NCP parser on 803.15.4 protocol
parser in Wireshark.
We suppose separate PCAP DLT/WTAP_ENCAP  will be the best choice.

As a follow-up, this request did not go well.  It was merged before it
was fully reviewed, subsequent points were not addressed and the
requester seems to be out of contact.

It is difficult to see how the header type can be useful if it is not
sufficiently well defined, so I am going to revert the changes made in
libpcap pull request 1061 and tcpdump-htdocs pull request 25, unless
anyone can suggest a better way to resolve this.




--

Best Regards,
Eugene

Eugene Exarevsky| Architect| DSR Corporation 
| E-mail: 
eugene.exarev...@dsr-corporation.com 
| Skype: eugene.exarevsky 





CONFIDENTIALITY NOTICE: This e-mail transmission, and any documents, 
files or previous e-mail messages attached to it, is confidential and/or 
legally privileged.If you are not the intended recipient, or a person 
responsible for delivering it to the intended recipient, any use, 
disclosure or copying of this email or any attachments is expressly 
prohibited. If you have received this transmission in error, please 
immediately notify the sender by reply email, and destroy the original 
transmission and its attachments without reading or saving in any manner.


VIRUS: Every care has been taken to ensure this email and its 
attachments are virus free, however, any loss or damage incurred in 
using this email is not the sender's responsibility. It is your 
responsibility to ensure virus checks are completed before installing 
any data sent in this email to your computer.


--- End Message ---
___
tcpdump-workers mailing list
tcpdump-workers@lists.tcpdump.org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers

Re: [tcpdump-workers] Request for new LINKTYPE/DLT ZBOSS_NCP

[Denis Ovsienko via tcpdump-workers]

--- Begin Message ---
On Tue, 2 Nov 2021 09:46:30 +0300
Eugene Exarevsky via tcpdump-workers
 wrote:

> Hi all,
> 
> Please, allocate a new LINKTYPE/DLT called ZBOSS_NCP.
> 
> The background is following: we (DSR) are developing Zigbee protocol 
> stack ZBOSS (
> The stack has serial commands interface - NCP.
> We implemented a dissector of that NCP protocol for Wireshark and
> want to publish it. The idea is that we can display NCP commands and
> Zigbee traffic between the stack and Zigbee transceiver in the same
> log. But, indeed, NCP serial protocol is not related to 802.15.4
> itself, so it will be wrong to base NCP parser on 803.15.4 protocol
> parser in Wireshark.
> We suppose separate PCAP DLT/WTAP_ENCAP  will be the best choice.

As a follow-up, this request did not go well.  It was merged before it
was fully reviewed, subsequent points were not addressed and the
requester seems to be out of contact.

It is difficult to see how the header type can be useful if it is not
sufficiently well defined, so I am going to revert the changes made in
libpcap pull request 1061 and tcpdump-htdocs pull request 25, unless
anyone can suggest a better way to resolve this.

-- 
Denis Ovsienko
--- End Message ---
___
tcpdump-workers mailing list
tcpdump-workers@lists.tcpdump.org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers

[tcpdump-workers] Request for new LINKTYPE/DLT ZBOSS_NCP

[Eugene Exarevsky via tcpdump-workers]

--- Begin Message ---

Hi all,

Please, allocate a new LINKTYPE/DLT called ZBOSS_NCP.

The background is following: we (DSR) are developing Zigbee protocol 
stack ZBOSS (

The stack has serial commands interface - NCP.
We implemented a dissector of that NCP protocol for Wireshark and want 
to publish it. The idea is that we can display NCP commands and Zigbee 
traffic between the stack and Zigbee transceiver in the same log.
But, indeed, NCP serial protocol is not related to 802.15.4 itself, so 
it will be wrong to base NCP parser on 803.15.4 protocol parser in 
Wireshark.

We suppose separate PCAP DLT/WTAP_ENCAP  will be the best choice.

--
Best regards,
Eugene.


--- End Message ---
___
tcpdump-workers mailing list
tcpdump-workers@lists.tcpdump.org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers