RE: Decoding with an intermediate non recognized layer

"Anders Broman (AL/EAB)" <[email protected]>
Newsgroups gmane.network.ethereal.user
Message-ID <C449F18A1C0F294CAF4C0515A18D6EE603906504@esealmw107.eemea.ericsson.se>
Hi,
If the output is from some sort of trace tool you could write a dissector which could strip off those octets. Do they contain some meaningful information ?
Packet length?
Which TCP port(s) are used ?
 
Brg
Anders

________________________________

From: [email protected] [mailto:[email protected]] On Behalf Of jose alonso
Sent: den 20 juni 2006 17:55
To: [email protected]
Subject: [Ethereal-users] Decoding with an intermediate non recognized layer


Hi, i have captures of messages following next stack: Phy / Eth / IP / Tcp / 2 octets / SCCP / RANAP ..., the problem is layer between TCP and SCCP, consisting of two octets, an unrecognized format that makes impossible decoding upper layers, which are known for Ethereal.
Is there any way to configure an : ignore these two octets an continue decoding from there', or something similar to avoid this 'layer'?
Maybe some kind of output manipulation to overwrite these octets with some dummy, but known, header like M3UA...?
I would thank any idea, i'm new in Ethereal.
 
Alonso 

________________________________


LLama Gratis a cualquier PC del Mundo.
Llamadas a fijos y móviles desde 1 céntimo por minuto.
http://es.voice.yahoo.com <http://us.rd.yahoo.com/mail/es/tagline/messenger/*http://es.voice.yahoo.com/>

_______________________________________________
Ethereal-users mailing list
[email protected]
http://www.ethereal.com/mailman/listinfo/ethereal-users
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.