> Apparently, the fields of the LAPB frame aren't sufficient to determine > if it is extended LAPB or not (i.e. modulo 128 or modulo 8). I guess > this information is stored in the data file by the analysers but I don't > know where. Perhaps it's set by one of the Set Mumble Mumble Mode Extended commands? I.e., perhaps the connection starts off in basic mode, and one side sends something like Set Asynchronous Balanced Mode Extended to tell the other side that they should both run modulo 128? > Does somebody have documentation about ngsniffer data file format > (especially for X.25 : the documentation I have doesn't talk about X.25) > ? Sniffer manuals tend to have that... ...unfortunately, if you don't have a Sniffer that handles some particular networking type, the manual may not document that type. I don't have any manual for a Sniffer that can handle X.25; perhaps somebody else out there does.
Powered by MHonArc 2.6.10