Re: Request for new Link-layer header type

[<HPfrommer () hilscher com>]

-----Ursprüngliche Nachricht-----
Von: tcpdump-workers-owner () lists tcpdump org [mailto:tcpdump-workers-owner () lists tcpdump org] Im Auftrag von Guy 
Harris
Gesendet: Mittwoch, 14. September 2011 01:08
An: tcpdump-workers () lists tcpdump org
Betreff: Re: [tcpdump-workers] Request for new Link-layer header type


> On Sep 6, 2011, at 11:01 PM, <HPfrommer () hilscher com> ><HPfrommer () hilscher com> wrote:
>
> > > Will there ever be both "normal mode" and "transparent mode" packets
> > in
> > > the same capture file?  If not, perhaps transparent mode should have
> > its
> > > own link-layer type value.
> >
> > The two modes will never be mixed up in one file. Having a second
> > link-layer type would be nice.
>
> So the preamble is the 7 octets described in section 3.2.1 of IEEE 802.3->2008 (0xAA 0xAA 0xAA 0xAA 0xAA 0xAA 0xAA, if 
> the frame is valid), and the >SFD is the octet described in section 3.2.2 (0xAB, if the frame is valid)?-

Yes, that's right, these are the sequences described in sections 3.2.1 and 3.2.2. Even though, in hexadecimal notation 
this would be 0x55 0x55 0x55 0x55 0x55 0x55 0x55 and 0xd5, respectively (as denoted in section 3.3)

Regards,
Holger





Hilscher Gesellschaft für Systemautomation mbH
Rheinstr. 15, 65795 Hattersheim
Sitz der Gesellschaft: Hattersheim
Geschäftsführer: Hans-Jürgen Hilscher
Registergericht: Amtsgericht Frankfurt/Main
Handelsregister: Frankfurt B 26873
www.hilscher.com

-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.