Ethereal-users: Re: [Ethereal-users] Nesting protocols

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Guy Harris" <gharris@xxxxxxxxx>
Date: Mon, 28 Jun 2004 18:49:42 -0700 (PDT)
Craig, Dave said:
> For instance, I pipe pppd through netcat for UDP encapsulation. Is there a
> way to get ethereal to decode the PPP frames encapsulated in UDP frames?

You'd have to write a dissector to decode the netcat encapsulation, which
looks as if it might involve extracting frames from a sequence of bytes
and removing frame terminator bytes and escape bytes.  That's likely to be
a bit painful. as you might have to do reassembly across UDP packet
boundaries (if a PPP packet is split across packet boundaries) or dissect
more than one PPP packet in a UDP packet.

There's no way to get Ethereal to do that *without* writing code.