[tcpdump-workers] DLT request for EBHSCR

Guenter.Ebermann at elektrobit.com Guenter.Ebermann at elektrobit.com
Wed Aug 8 09:26:04 EDT 2018


Hi,

The Elektrobit High Speed Capture and Replay (EBHSCR) protocol is produced by a
PCIe Card for interfacing high speed automotive interfaces.

We write the captured data into a pcap file, using a user specific DLT.
But we want to upstream our dissector, thus I want to request an official DLT.

Please find the protocols header description here:
 0                   1                   2                   3
 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|  Major number |Sl.|  Channel  |Version|         Status        |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|                             Length                            |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|                                                               |
+                        Start timestamp                        +
|                                                               |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|                                                               |
+                         Stop timestamp                        +
|                                                               |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|                              CRC                              |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|                            Reserved                           |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

All multi-byte values in the header are big endian.

Major number:    type of the frame captured (e.g. camera, BroadR-Reach, .)
Sl.:             Slot 0-3
Channel:         Each slot has sub-channels: 0-63
Version:         set to 0
                 Everything bedsides these four bits and the Length may change
                 with a new Version
Status:          flags used for error reporting, specific for each major number
Length:          length in bytes of the frame following this header,
                 not including header
Start timestamp: nanosecond counter, taken when we received the start of frame
Stop timestamp:  nanosecond counter, taken when we received the end of frame
CRC:             CRC-32C (Castagnoli) of frame bytes, not including header
Reserved:        set to 0

After the header comes a captured frame-payload. Its content depends on the
major number in the header.

Do you need any more information?

Thanks,
G√ľnter Ebermann


More information about the tcpdump-workers mailing list