Wireshark-bugs: [Wireshark-bugs] [Bug 8522] Add heuristic to dissect DVB-S2 over ethernet
Date: Wed, 27 Mar 2013 20:11:16 +0000

Comment # 10 on bug 8522 from
So in what circumstances is this encapsulation used?

Is it on an Ethernet on which other protocols are running, where you're
actually sending the frames from one machine to one or more hosts to process
("more hosts", in the case of the test capture, as it's being sent to the
broadcast address), or is this a hack similar to Cisco's DOCSIS-over-Ethernet
hack, where the lowest-level Ethernet framing is being used, but the actual
contents of the frame is a DOCSIS frame and there's no Ethernet header on the
frame?  (It's "DOCSIS-over-Ethernet" to support sniffing DOCSIS traffic without
requiring special hardware on your sniffer, not "DOCSIS-over-Ethernet" to
support transporting DOCSIS packets over an Ethernet for communications
purposes.)

If the former, you appear to be using fields with a length field rather than a
type field; if the DVB-S2 frame immediately follows the 14-byte Ethernet
header, that's not a valid Ethernet frame, as an 802.2 header should follow an
Ethernet header with a length field.


You are receiving this mail because:
  • You are watching all bug changes.