summaryrefslogtreecommitdiff
path: root/wiretap/snoop.c
diff options
context:
space:
mode:
authorGuy Harris <guy@alum.mit.edu>2011-12-03 07:16:56 +0000
committerGuy Harris <guy@alum.mit.edu>2011-12-03 07:16:56 +0000
commita1fe0c746d54d61f91eb792df6bb477ec08a66dd (patch)
tree284f214d5241953c9e8afdf0687590e8eb61045e /wiretap/snoop.c
parent0af6a56971927d6dd3fd4fdb053b39c11044270d (diff)
downloadwireshark-a1fe0c746d54d61f91eb792df6bb477ec08a66dd.tar.gz
Update some comments to reflect current reality (as in "a lot of stuff
is no longer available, but there's an IETF list of snoop datalink types, at least"). svn path=/trunk/; revision=40080
Diffstat (limited to 'wiretap/snoop.c')
-rw-r--r--wiretap/snoop.c41
1 files changed, 25 insertions, 16 deletions
diff --git a/wiretap/snoop.c b/wiretap/snoop.c
index aac38c21dd..ebda14ce94 100644
--- a/wiretap/snoop.c
+++ b/wiretap/snoop.c
@@ -111,6 +111,12 @@ static gboolean snoop_dump(wtap_dumper *wdh, const struct wtap_pkthdr *phdr,
* for the "dlpi.h" header file specified by The Open Group, which lists
* the DL_ values for various protocols; Solaris 7 uses the same values.
*
+ * See
+ *
+ * http://www.iana.org/assignments/snoop-datalink-types/snoop-datalink-types.xml
+ *
+ * for the IETF list of snoop datalink types.
+ *
* The page at
*
* http://mrpink.lerc.nasa.gov/118x/support.html
@@ -139,19 +145,21 @@ static gboolean snoop_dump(wtap_dumper *wdh, const struct wtap_pkthdr *phdr,
*
* Source to an "atmdump" package, which includes a modified version of
* "libpcap" to handle SunATM DLPI and an ATM driver for FreeBSD, and
- * also includes "atmdump", which is a modified "tcpdump", is available
+ * also includes "atmdump", which is a modified "tcpdump", was available
* at
*
* ftp://ftp.cs.ndsu.nodak.edu/pub/freebsd/atm/atm-bpf.tgz
*
- * and that code also indicates that DL_IPATM is used, and that an
- * ATM packet handed up from the Sun driver for the Sun SBus ATM card on
- * Solaris 2.5.1 has 1 byte of direction, 1 byte of VPI, 2 bytes of VCI,
- * and then the ATM PDU, and suggests that the direction flag is 0x80 for
- * "transmitted" (presumably meaning DTE->DCE) and presumably not 0x80 for
- * "received" (presumably meaning DCE->DTE). That code was used as the
- * basis for the SunATM support in current CVS versions of libpcap and
- * tcpdump, and it works.
+ * (the host name is no longer valid) and that code also indicated that
+ * DL_IPATM is used, and that an ATM packet handed up from the Sun driver
+ * for the Sun SBus ATM card on Solaris 2.5.1 has 1 byte of direction,
+ * 1 byte of VPI, 2 bytes of VCI, and then the ATM PDU, and suggests that
+ * the direction flag is 0x80 for "transmitted" (presumably meaning
+ * DTE->DCE) and presumably not 0x80 for "received" (presumably meaning
+ * DCE->DTE). That code was used as the basis for the SunATM support in
+ * later versions of libpcap and tcpdump, and it worked at the time the
+ * development was done with the SunATM code on the system on which the
+ * development was done.
*
* In fact, the "direction" byte appears to have some other stuff, perhaps
* a traffic type, in the lower 7 bits, with the 8th bit indicating the
@@ -165,16 +173,17 @@ static gboolean snoop_dump(wtap_dumper *wdh, const struct wtap_pkthdr *phdr,
* if it can't, this may be useful reference information for anybody doing
* code to use DLPI to do raw packet captures on those network types.
*
- * See
+ * Once upon a time
*
* http://web.archive.org/web/20010906213807/http://www.shomiti.com/support/TNCapFileFormat.htm
*
- * for information on Shomiti's mutant flavor of snoop. For some unknown
- * unknown reason, they decided not to just Go With The DLPI Flow, and
- * instead used the types unspecified in RFC 1461 for their own nefarious
- * purposes, such as distinguishing 10MB from 100MB from 1000MB Ethernet
- * and distinguishing 4MB from 16MB Token Ring, and distinguishing both
- * of them from the "Shomiti" versions of same.
+ * gave information on Shomiti's mutant flavor of snoop; Shomiti's Web site
+ * is no longer available on the Wayback Machine. For some unknown reason,
+ * they decided not to just Go With The DLPI Flow, and instead used the types
+ * unspecified in RFC 1461 for their own nefarious purposes, such as
+ * distinguishing 10MB from 100MB from 1000MB Ethernet and distinguishing
+ * 4MB from 16MB Token Ring, and distinguishing both of them from the
+ * "Shomiti" versions of same.
*/
int snoop_open(wtap *wth, int *err, gchar **err_info)
{