Ethereal-dev: [Ethereal-dev] About AppleTalk (ddp) address format.

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: didier <dgautheron@xxxxxxxx>
Date: Thu, 27 Jun 2002 17:56:04 +0000
Hi,
A DDP AppleTalk address is (for extented network):

                                IP close match
2 bytes network            |
1 bytes node               | IP address

1 byte protocol (ddp.type) | UDP/TCP/ICMP

1 byte port                | UDP/TCP port

In ethereal, network + node +port are used for SET_ADDRESS(&pinfo->...
Why?

For some protocols you need to know the port number eg:
ZIP zone information
DDP --> ZIP (ddp.type == 6)
DDP --> ATP (ddp.type == 3) --> ZIP (ddp.port == 6 if not, it's an ASP attention message) 

A little like
IP --> UDP --> DNS
IP --> TCP --> DNS
well
IP --> DNS
IP --> TCP --> DNS
what are the side effects if I add TP_DDP in epan/packet_info.h port_type and use pinfo->srcport, pinfo->destport? 

Didier.