AX25 in libpcap & wireshark (was ethereal)

AX25 in libpcap & wireshark (was ethereal)

[Richard Stearn]

It's hands up time!

I have ported my AX.25 dissection patch to wireshark 0.99.5 and added some
more protocols.

The patch now contains:

     AX.25
     Netrom
     Flexnet (well, it recognises Flexnet packets)
     APRS (according to V1.01 + 1.1 & 1.2 errata)
     AXIP (untested)
     BPQ
     AX.25_ARP

The AX.25 dissector hands off IP to the existing dissectors so IP over AX.25
is covered.

This patch is getting larger and I am hesitant about posting it to the the list.

So those who wish to play please put your hands up.  I can then distribute the
patch off list.

Packet captures for Flexnet & AXIP welcome.

-- 
Regards
     Richard

Re: AX25 in libpcap & wireshark (was ethereal)

[Chuck Hast]

On 3/13/07, Richard Stearn <richard@rns-stearn.demon.co.uk> wrote:
> It's hands up time!
>
> I have ported my AX.25 dissection patch to wireshark 0.99.5 and added some
> more protocols.
>
> The patch now contains:
>
>      AX.25
>      Netrom
>      Flexnet (well, it recognises Flexnet packets)
>      APRS (according to V1.01 + 1.1 & 1.2 errata)
>      AXIP (untested)
>      BPQ
>      AX.25_ARP
>
> The AX.25 dissector hands off IP to the existing dissectors so IP over AX.25
> is covered.
>
> This patch is getting larger and I am hesitant about posting it to the the list.
>
> So those who wish to play please put your hands up.  I can then distribute the
> patch off list.
>
> Packet captures for Flexnet & AXIP welcome.
>
> --
> Regards
>      Richard

There are those of us who use ROSE/FPAC, did you just forget to
list it or did you leave it out? Listen decodes it, so it should not be
a big deal to add it?


-- 
Chuck Hast  -- KP4DJT --
To paraphrase my flight instructor;
"the only dumb question is the one you DID NOT ask resulting in my going
out and having to identify your bits and pieces in the midst of torn
and twisted metal."

Re: AX25 in libpcap & wireshark (was ethereal)

[Richard Stearn]

Chuck Hast wrote:

> There are those of us who use ROSE/FPAC, did you just forget to
> list it or did you leave it out? Listen decodes it, so it should not be
> a big deal to add it?

Chuck

Neither and both :-)

Trying to figure if ROSE is the same as (or derivitive of)
	"X.880 OSI Remote Operations Service"

I am also wary of using listen code due to licensing issues.
IIRC most of listen is Phil Karns code and not released under
GPL (don't quote me on that, it is a year since I looked last).

-- 
Regards
	Richard

Re: AX25 in libpcap & wireshark (was ethereal)

[Tomi Manninen]

On Tue, 2007-03-13 at 22:05 +0000, Richard Stearn wrote:

> Trying to figure if ROSE is the same as (or derivitive of)
> 	"X.880 OSI Remote Operations Service"

ROSE is similar but not equal to X.25 PLP (layer 3). And
that's about all I know about it... :)

> I am also wary of using listen code due to licensing issues.
> IIRC most of listen is Phil Karns code and not released under
> GPL (don't quote me on that, it is a year since I looked last).

Listen is GPL. All of ax25-libs/tools/apps is. Specifically,
listen uses code from KA9Q with permission to distribute it
under the GPL. Does anyone remember the details? I don't think
Jonathan reads this anymore?

-- 
Tomi Manninen / OH2BNS / KP20JF74