Ethereal-users: Re: [Ethereal-users] Serial Capture Analysis

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <guy@xxxxxxxxxx>
Date: Tue, 16 Apr 2002 17:23:39 -0700
On Tue, Apr 16, 2002 at 05:18:39PM -0700, Benjamin Lee wrote:
> So the problem for import is to chop the stream into separate PPP
> frames and then I should get what I want (which is being
> able see WSP/WTP traffic up the stack), or will I only see
> PPP frames?

Well, you described it as

	...just some Hayes-compatible AT modem chatter followed by then
	PPP LCP/IPCP traffic and then some WSP/WTP on top.

Do you mean WSP atop WTP directly atop PPP or atop some non-IP protocol
("IP" here includes both IPv4 and IPv6), or do you mean WSP atop WTP
atop UDP atop IP atop PPP?

If the former, you'll only see PPP frames, until somebody tells us what
the other protocols are and how to identify them.

If the latter, then, if the WSP-atop-WTP traffic is to or from port
9201, or if there's earlier WSP-atop-WTP traffic to port 9201 that
redirects to the new port, then Ethereal should dissect it.

Otherwise, you may have to use the "Decode As" option to get Ethereal to
dissect it.