Ethereal-dev: Re: [Ethereal-dev] Van Jacobson dissector.
In the VJ dissector
I don't have the bytes preceding the ppp payload which can potentially be
1-2 bytes for the ppp protocol field to many depending on what ppp is
running over (pppoe comes to mind).
Why do you *need* those bytes? Doesn't the decompresser just produce an
IP datagram?
IP/TCP and up. VJ does some pretty horrific layering violations for the
sake of performance. The idea here is (more for tetherial) you end up with
what looks like a ppp packet that was never compressed in the uncompressed
tab framing info and all, otherwise the uncompressed packet tab contains
only IP and up. Since VJ only does IPv4 this would be OK because you can
assume its an IPv4 packet. We are looking at implementing RFC2507&2509
which looks similar to RFC1144 (VJ)&1172 but has a greatly expanded set
of protocols (and a greatly expanded set of layering violations) it can header
compress. In that senario it would be nice for the uncompressed packet tab
to contain some of the framing information so that the protocol is derivable.
Again we are thinking it would be nice to have what looks like a ppp packet
that was never compressed in the uncompressed tab framing info and all.
dunno if that helps, or even makes sense....
-p.j.
_______________________________________________
Ethereal-dev mailing list
Ethereal-dev@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-dev
