Ethereal

Re: [ethereal-users] can I see PPP inside L2TP packets?
Google
 
Web Ethereal.com

Home | Introduction | Documentation | Lists | FAQ | Development | Wiki | Bugs

Ethereal-users: June 2000






Here is the sample trace file of a L2TP connection between two PCs.

LAC IP address is 172.16.175.110
LNS address is 172.16.246.176

The trace contain the following actions:
- LAC opens a new tunnel
- LAC opens a new call (PPP peers: 172.16.175.106 <---> 172.16.175.107)
- LAC sends a couple of ping over PPP connection (packets 60-61, 63-64)
- LAC closes the call
- LAC closes the tunnel

No PPP protocol info seems to be shown into the L2TP packet and also the data
parts of packet number 60 and 63 (ping) doesn't appear in bold font as usual.

Thanks for your help.

   Luca Risso

(See attached file: l2tp.log)






Gilbert Ramirez <gram@xxxxxxxxxx> on 02/06/2000 17.38.20
                                                                                
                                                                                
                                                                                


                                                              
                                                              
                                                              
 To:      Luca Risso/MAIN/MC1@MCMAIN                          
                                                              
 cc:      ethereal-users@xxxxxxxx                             
                                                              
                                                              
                                                              
 Subject: Re: [ethereal-users] can I see PPP inside L2TP      
          packets?                                            
                                                              








On Fri, Jun 02, 2000 at 09:44:44AM -0500, Luca Risso wrote:
>
>
>
>
> I trying to use Ethereal 0.8.8 for the first time and I'm testing it on a
> L2TP
> link over ethernet.
> I'm able to see L2TP headers, but it's seems that the ecapsulated PPP is
> not
> shown by the dissector on the screen.
> Is this the correct behaviour or I'm doing something wrong?
>
> Thanks
>
>      Luca

There may be a problem with Ethereal. Can you send a small sample trace file?

--gilbert


Ôò¡ÿÿ¤c;9óÞ  yh?´?4àE?@|¬¯n¬ö°¥¥~ ?Èv???
?
?localhost.localdomainAdtran, l2tpd?	Eg?
¤c;9¬ì¦¦´?4àyh?E?Û?|:¬ö°¬¯n¥¥?ËÈ|Eg???
?
?!gexs318.it.marconicomms.comAdtran, l2tpd?	Eg?
¤c;9Pî>>yh?´?4àE0@|{¬¯n¬ö°¥¥f ÈEg?¤c;9?ò<<´?4àyh?E(Þ?|§¬ö°¬¯n¥¥æÂÈEg²c;9+?ZZyh?´?4àEL@|\¬¯n¬ö°¥¥8??È0Eg?
?Hs?
?
²c;9Ë?NN´?4àyh?E@ß?|?¬ö°¬¯n¥¥,ÕRÈ$EgHs??Hs?
²c;9?<<´?4àyh?E(à?|¥¬ö°¬¯n¥¥æÀÈEg²c;9²?jjyh?´?4àE\@|K¬¯n¬ö°¥¥Hn¶È@EgHs??
????
?
?
&????'²c;90÷<<´?4àyh?E(ê?|?¬ö°¬¯n¥¥?LÈEgHs³c;9ý!NN´?4àyh?E@ë?|?¬ö°¬¯n¥¥,i°H$EgHsÿÀ!Ãí"³c;9lILLyh?´?4àE>@|h¬¯n¬ö°¥¥*©×EgHsÿÀ!Ãí"³c;9?NDD´?4àyh?E6ì?|?¬ö°¬¯n¥¥"ØÌHEgHsÿÀ!
VÈ'[³c;9®QBByh?´?4àE4@|q¬¯n¬ö°¥¥ êEgHsÿÀ!
VÈ'[³c;9ìVNN´?4àyh?E@í?|?¬ö°¬¯n¥¥,geH$EgHsÿÀ!@n?ç³c;9ÛXLLyh?´?4àE>	@|f¬¯n¬ö°¥¥*§?EgHsÿÀ!@n?ç³c;9ç]DD´?4àyh?E6î?|?¬ö°¬¯n¥¥"S?HEgHsÿÀ!
úèt³c;9¯_BByh?´?4àE4
@|o¬¯n¬ö°¥¥ ?«EgHsÿÀ!
úèt³c;9eNN´?4àyh?E@ï?|~¬ö°¬¯n¥¥,?cH$EgHsÿÀ!??óc;9ëwLLyh?´?4àE>@|d¬¯n¬ö°¥¥*×?EgHsÿÀ!??óc;9N}DD´?4àyh?E6ð?|?¬ö°¬¯n¥¥"FOHEgHsÿÀ!
57Û_³c;9
BByh?´?4àE4@|m¬¯n¬ö°¥¥ ?lEgHsÿÀ!
57Û_³c;9_?NN´?4àyh?E@ñ?||¬ö°¬¯n¥¥,ÐH$EgHsÿÀ!?¥¢;³c;9D?LLyh?´?4àE>
@|b¬¯n¬ö°¥¥*[÷EgHsÿÀ!?¥¢;³c;9W?DD´?4àyh?E6ò?|?¬ö°¬¯n¥¥"":HEgHsÿÀ!
±
??³c;9Û?BByh?´?4àE4@|k¬¯n¬ö°¥¥ bWEgHsÿÀ!
±
??³c;9?NN´?4àyh?E@ó?|z¬ö°¬¯n¥¥,öLH$EgHsÿÀ!¨N·³c;9Å?LLyh?´?4àE>@|`¬¯n¬ö°¥¥*6tEgHs	ÿÀ!¨N·³c;9r?DD´?4àyh?E6ô?|?¬ö°¬¯n¥¥"¤HEgHs		ÿÀ!
A¶?³c;9û?BByh?´?4àE4@|i¬¯n¬ö°¥¥ RÁEgHs	
ÿÀ!
A¶?³c;9Ê¡NN´?4àyh?E@õ?|x¬ö°¬¯n¥¥,öJH$EgHs

ÿÀ!ºH¢³c;9{£LLyh?´?4àE>@|^¬¯n¬ö°¥¥*6rEgHs
ÿÀ!ºH¢³c;9ǨDD´?4àyh?E6ö?|?¬ö°¬¯n¥¥"¿WHEgHsÿÀ!
? ß³c;9LªBByh?´?4àE4@|g¬¯n¬ö°¥¥ ÿtEgHsÿÀ!
? ß³c;9À®NN´?4àyh?E@÷?|v¬ö°¬¯n¥¥,rBH$EgHsÿÀ!ð×ä?³c;9n°LLyh?´?4àE>@|\¬¯n¬ö°¥¥*²iEgHs
ÿÀ!ð×ä?³c;9?µDD´?4àyh?E6ø?|¬ö°¬¯n¥¥",=HEgHs

ÿÀ!
?ª?³c;9·BByh?´?4àE4@|e¬¯n¬ö°¥¥ lZEgHs
ÿÀ!
?ª?³c;9ª¼NN´?4àyh?E@ù?|t¬ö°¬¯n¥¥,N§H$EgHsÿÀ!Ïû(ú³c;9Z¾LLyh?´?4àE>@|Z¬¯n¬ö°¥¥*?ÎEgHsÿÀ!Ïû(ú³c;9©ÃDD´?4àyh?E6ú?|}¬ö°¬¯n¥¥"ù<HEgHsÿÀ!
î¥nê³c;9-ÅBByh?´?4àE4@|c¬¯n¬ö°¥¥ 9ZEgHsÿÀ!
î¥nê³c;9ÊNN´?4àyh?E@û?|r¬ö°¬¯n¥¥,|?H$EgHsÿÀ!	Jz??³c;9ùËLLyh?´?4àE>@|X¬¯n¬ö°¥¥*¼»EgHsÿÀ!	Jz??³c;9ÑDD´?4àyh?E6ü?|{¬ö°¬¯n¥¥"¢HEgHsÿÀ!	
9Ê\³c;9â?LLyh?´?4àE>@|W¬¯n¬ö°¥¥*Q\EgHsÿÀ!Ü?Yä³c;9E?NN´?4àyh?E@ý?|p¬ö°¬¯n¥¥,3H$EgHsÿÀ!Ü?Yä³c;9%544yh?´?4àE&@|n¬¯n¬ö°¥¥^>EgHs¶c;9ÕïNN´?4àyh?E@þ?|o¬ö°¬¯n¥¥,|?H$EgHsÿÀ!	Jz??¶c;9üòLLyh?´?4àE>@|U¬¯n¬ö°¥¥*»¶EgHsÿÀ!	Jz??¶c;9ìóFFyh?´?4àE8@|Z¬¯n¬ö°¥¥$È«EgHs?!-¶c;9m÷<<´?4àyh?E(ÿ?|?¬ö°¬¯n¥¥+HEgHs¶c;9cùHH´?4àyh?E:?|s¬ö°¬¯n¥¥&-HEgHs?!¬¯k-¶c;9£úBB´?4àyh?E4?|x¬ö°¬¯n¥¥ <XHEgHs?!
¬¯j¶c;9ºû44yh?´?4àE&@|k¬¯n¬ö°¥¥^9EgHs¶c;9¢ýFFyh?´?4àE8@|X¬¯n¬ö°¥¥$l,EgHs?!¬¯k-¶c;9?þFFyh?´?4àE8@|W¬¯n¬ö°¥¥$m+EgHs?!¬¯j-¶c;9_<<´?4àyh?E(?|?¬ö°¬¯n¥¥'HEgHs¶c;9QHH´?4àyh?E:?|p¬ö°¬¯n¥¥&,HEgHs?!¬¯j-¶c;9Ä®	44yh?´?4àE&@|h¬¯n¬ö°¥¥^6EgHsÁc;9#ô??yh?´?4àE{!@|¬¯n¬ö°¥¥g<?EgHs!ET @Ã?¬¯j¬¯kküÁc;9øò	

 !"#$%&'()*+,-./01234567Ác;9Nù??´?4àyh?E}?|+¬ö°¬¯n¥¥iü%HaEgHs!ETÿ®¬¯k¬¯jküÁc;9øò	

 !"#$%&'()*+,-./01234567Ác;9a·44yh?´?4àE&"@|e¬¯n¬ö°¥¥^4EgHsÂc;9ëï??yh?´?4àE{$@|¬¯n¬ö°¥¥g<?EgHs!ET#@Ã?¬¯j¬¯koüÂc;9ï	

 !"#$%&'()*+,-./01234567Âc;9[ô??´?4àyh?E}?|)¬ö°¬¯n¥¥iü#HaEgHs!ETÿ¬¬¯k¬¯joüÂc;9ï	

 !"#$%&'()*+,-./01234567Âc;9[·44yh?´?4àE&%@|b¬¯n¬ö°¥¥^2EgHsØc;9,çXXyh?´?4àEJ&@|=¬¯n¬ö°¥¥6VÃÈ.EgHs??Goodbye!?HsØc;9Jê<<´?4àyh?E(	?||¬ö°¬¯n¥¥?KÈEgHsàc;93ß>>´?4àyh?E0?|q¬ö°¬¯n¥¥f?ÈEg?àc;9Pà66yh?´?4àE('@|^¬¯n¬ö°¥¥æ½ÈEgàc;9(
>>yh?´?4àE0(@|U¬¯n¬ö°¥¥f?ÈEg?àc;95<<´?4àyh?E(
?|x¬ö°¬¯n¥¥æ¼ÈEgïc;9µ/XXyh?´?4àEJ)@|:¬¯n¬ö°¥¥6¢NÈ.Eg??	Eg?Goodbye!ïc;9Ü3<<´?4àyh?E(?|w¬ö°¬¯n¥¥æ»ÈEg

Powered by MHonArc 2.6.10