Wireshark · Ethereal-dev: Re: [Ethereal-dev] Ethereal DOCSIS plugin

[Guy Harris <guy@xxxxxxxxxxxx>]

On Nov 12, 2003, at 4:14 PM, Anand V. Narwani wrote:

> I noticed in 0.9.16 the capture dialog allows you to select the 
> link-layer header type.  Is it possible that we can use this to set 
> the link layer type when capturing DOCSIS packets?

It would be *IF*

	1) we add a DLT_DOCSIS link-layer header to libpcap;

	2) we modified libpcap so that, for Ethernet devices, it adds 
DLT_DOCSIS to the list of supported link-layer types and allows that 
type to be selected even though it's not in the list you get from the 
kernel;

	3) you use that modified version of libpcap.

A side-effect of that is that we could add support for DLT_DOCSIS in 
the BPF compiler, so you could do capture filtering.

I think all of that could be done, although it'd require you to use the 
current CVS version of libpcap (or libpcap 0.8, when it comes out, if 
it comes out after those capabilities are added).

>  I'm trying to avoid using the preference in the Frame protocol to 
> force all frames to be treated as DOCSIS frames.

Yes, I had the same idea....