[ethereal-dev] Decoding a PPTP/MPPE stream?

[Greg Kilfoyle <gregk@xxxxxxxxxxx>]

Hi,

I'm attempting to debug a Linux PPTP (MPPE) session and it won't decode
the packets that follow the LCP negotiation.

The first packet after LCP is an authentication packet (CHAP). The PPP
portion of the packet (after GRE) starts with the PPP protocol (0xc223)
but ethereal is expecting an address and control field.

LCP negotiation included the 2-bytes address/control field and negotiated 
address/control field compression.

Any ideas?

(I'm reluctant to provide the actual capture file as it is from my home to
work connection.)

Cheers, Greg.
--
Greg Kilfoyle (gregk@xxxxxxxxxxx)