Wireshark-bugs: [Wireshark-bugs] [Bug 5422] New: Support for dissecting SLL type 0x03 frames (ra
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Sat, 20 Nov 2010 03:35:42 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5422

           Summary: Support for dissecting SLL type 0x03 frames (raw
                    Ethernet with Linux Cooked encapsulation)
           Product: Wireshark
           Version: SVN
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Enhancement
          Priority: Low
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: tyson.key@xxxxxxxxx


Created an attachment (id=5490)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=5490)
A trace file containing 2 DHCP packets encapsulated in SLL 0x03/Ethernet
framing

Build Information:
Version 1.5.0-SVN-34857 (SVN Rev Unknown from unknown)

Copyright 1998-2010 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (32-bit) with GTK+ 2.18.9, with GLib 2.22.5, with libpcap
1.2.0-PRE-GIT_2010_11_16, with libz 1.2.3, with POSIX capabilities (Linux),
without libpcre, with SMI 0.4.8, with c-ares 1.6.0, with Lua 5.1, without
Python, with GnuTLS 2.8.6, with Gcrypt 1.4.4, with MIT Kerberos, with GeoIP,
with PortAudio V19-devel (built Jul 28 2009), without AirPcap.

Running on Linux 2.6.32.21-168.fc12.i686.PAE, with libpcap version
1.2.0-PRE-GIT_2010_11_16, with libz 1.2.3, GnuTLS 2.8.6, Gcrypt 1.4.4.

Built using gcc 4.4.4 20100630 (Red Hat 4.4.4-10).

Wireshark is Open Source Software released under the GNU General Public
License.

Check the man page and http://www.wireshark.org for more information.
--
It may be useful to support dissection of raw Ethernet frames encapsulated in
SLL Link Type 0x03 packets, in order to support further dissection of the
content within. 

These frames typically contain DHCP packets as seen during connection to an
802.11 network when capturing from the "any" interface under Linux, although I
have also encountered non-IPv4 packets with this encapsulation type (DECnet and
ATA-over-Ethernet, if I remember correctly). 

Thanks in advance.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.