Ethereal-dev: Re: [Ethereal-dev] Firestorm Network Intrusion Detection support for Ethereal

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: John Leach <john@xxxxxxxxxxxxxxx>
Date: 06 Mar 2003 12:52:39 +0000
hatype and prototype actually seem to be in network order. I would have
expected the protocol type to be anyway.

I'll double check this with some elog captures from a PowerPC on my
Intel.

John.

> Also, in packet-mmsll.c, the dissector tries to infer the byte order of
> the interface index (as it's presumably just raw data from the Linux
> kernel, and thus in the byte order of the host that wrote the file), but
> it neither tries to infer the byte order of, for example, the hatype or
> prototype fields nor use the inferred interface-index byte order to
> interpret those fields.  Make sure you test this by capturing on a machine
> with one byte order and reading the resulting file on a machine with a
> different byte order.
> 
-- 
GPG KEY: B89C D450 5B2C 74D8 58FB A360 9B06 B5C2 26F0 3047
   HTTP: http://www.johnleach.co.uk

Attachment: signature.asc
Description: This is a digitally signed message part