Ethereal-dev: Re: [ethereal-dev] PPP decode problem (fwd)

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <gharris@xxxxxxxxxxxx>
Date: Sun, 28 Nov 1999 23:53:09 -0800
> Here is a Sniffer X.25 capture. The version records in this file an in
> the PPP capture are almost identical :
> 
> ppp.syc :
> {maj_vers = 5, min_vers = 0, time = 0, date = 0, type = 4 '\004', 
>   network = 7 '\a', format = 1 '\001', timeunit = 1 '\001', 
>   cmprs_vers = 0 '\000', cmprs_level = 0 '\000', rsvd = {1, 3}}
> 
> x25.syc :
> {maj_vers = 4, min_vers = 40, time = 17048, date = 9811, type = 4 '\004',
>   network = 7 '\a', format = 1 '\001', timeunit = 1 '\001',
>   cmprs_vers = 0 '\000', cmprs_level = 0 '\000', rsvd = {0, 0}}

Perhaps they're making use of the "reserved" fields to indicate the type
of packet, although with only one capture of each type, I'm not sure
there's enough data to figure out how to tell PPP from X.25 captures.