Re: [Wireshark-dev] Ethernet header below MPLS...

2016-09-23 Thread barcaroller
On 2016-09-16 12:32:26 +, Francesco Fondelli said: If the Ethernet PW is without the CW (Control Word) - as it seems from your ASCII art - the "magic" might be happened in dissect_pw_eth_heuristic() around line 134 of packet-pw-eth.c. To get the big picture (line 462 of packet-mpls.c + line

Re: [Wireshark-dev] Ethernet header below MPLS...

2016-09-23 Thread barcaroller
On 2016-09-16 01:03:06 +, Guy Harris said: See https://tools.ietf.org/html/rfc4448 which is called "Encapsulation Methods for Transport of Ethernet over MPLS Networks". Thanks for pointing me in the right direction, Guy!

[Wireshark-dev] Ethernet header below MPLS...

2016-09-15 Thread barcaroller
I have a pcap file where, in each packet, the header hierarchy is as follows: ETH   IP     GRE       MPLS         ETH  <--- ?           VLAN             IP               TCP/UDP I would not expect to see an Ethernet header right below an MPLS header. And yet wireshark was able to properly ide