You must have handed wireshark a trace from an older VPP image which used WTAP_ENCAP_USER13 = 160, instead of the official WTAP_ENCAP_VPP = 280.
The encap type code that vpp writes changed on or about 1/9. Look for a commit entitled “Use the official libpcap file type” w/ SHA-1 7b01e9e897c8f780e79ca6e64c72d700bd27f86e. I guess you answered your own question regarding a quick way to handle that problem. You could also write a ten-line program to update the file type in place. There is no chance whatsoever of upstreaming a patch to dissect WTAP_ENCAP_USER13. HTH... Dave From: Benoit Ganne (bganne) <bga...@cisco.com> Sent: Friday, January 18, 2019 6:42 AM To: Dave Barach (dbarach) <dbar...@cisco.com>; vpp-dev@lists.fd.io Subject: RE: wireshark vpp dispatch trace dissector merged I can confirm : I just cloned the master branch from the wireshark repository, compiled and it worked. A minor possible improvement though: I had to go to Preferences > Protocols > DLT_USER > Edit to add an association between the VPP dissector and DLT_USER=160 so that wireshark recognize & decode the traces as VPP traces. It would be nice to have our own trace id associated out-of-the-box. Best, Ben From: vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> <vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io>> On Behalf Of Dave Barach via Lists.Fd.Io Sent: jeudi 17 janvier 2019 14:12 To: vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> Cc: vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> Subject: [vpp-dev] wireshark vpp dispatch trace dissector merged I’m pleased to announce that our dispatch trace wireshark dissector has been merged. At some point in the indefinite future, everyone’s favorite distro will include a copy of wireshark which knows how to dissect vpp dispatch trace pcap files. I’ll update the docs accordingly. Dave From: bugzilla-dae...@wireshark.org<mailto:bugzilla-dae...@wireshark.org> <bugzilla-dae...@wireshark.org<mailto:bugzilla-dae...@wireshark.org>> Sent: Thursday, January 17, 2019 6:32 AM To: wiresh...@barachs.net<mailto:wiresh...@barachs.net> Subject: [Bug 15411] [dissector] Add dissector for vector packet processing dispatch traces Comment # 2<https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15411#c2> on bug 15411<https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15411> from Gerrit Code Review<mailto:gerrit-do-not-re...@wireshark.org> Change 31466 merged by Anders Broman: VPP: add vpp graph dispatch trace dissector https://code.wireshark.org/review/31466 ________________________________ You are receiving this mail because: * You reported the bug. * You are the assignee for the bug.
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#11951): https://lists.fd.io/g/vpp-dev/message/11951 Mute This Topic: https://lists.fd.io/mt/29172119/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
