[Ethereal-dev] Cisco Cable Intercept plugin

[Mark Hoffer <hoffer@xxxxxxxxx>]

Hello:

I am working on VOIP applications using the CISCO uBR 10012 and uBR
7246VXR.  I needed a plugin to view packets captured by the cable
intercept command on the uBRs.  I found that the PCLI plugin did not
work correctly with the uBRs, since PCLI was looking for a call content
connection identifier before an ip packet.  Cisco sends a UDP packet
with either 1 byte (7246) or 0 byte (10012) padding in between the shell
and the encapsulated frame.  The encapsulated frame can be anything, not
always IP, so I send the encapsulated part back through the Frame
dissector.

Two preferences are needed:  
The UDP Port that the uBR is sending information to the listener on.  (I
defaulted to 54544, although this is set by the user on the uBR when the
command is entered in.)

The offset (padding) between the shell headers and the encapsulated
frame. (so far for me 0 or 1)

This is more of a generic UDP encapsulated plugin, so it's potential use
is far more than the 'Cable Intercept' command.

I don't know anything about copyrights, so please modify the copyright
line as needed.  I simply modified the code that Ed Warnicke (pcli
plugin author) made to suite my needs.

Please reply if you need sample packet captures.

Thanks,
Mark Hoffer
Massillon Cable Communications

Attachment: ciscoci.2.tgz
Description: application/compressed-tar