From Florent DROUIN:

This is a replacement of the existing decoding of ERF files (Extensible Record
Format from Endace). 
For the decoding of the ERF files, according to the "type of record" given in
the ERF header, several decoders can be used. Up to now, the decoder is
determined according to an environment variable, or with a kind of heuristic.
And, all the treatment is done during the file extraction.

The new architecture, will separate the ERF file decoding, and the ERF record
decoding. The ERF records will be decoded with a specific dissector. This
dissector can be configured with options, to replace the environment variable.

http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1839

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@23092 f5534014-38df-0310-8fa8-9805f1628bb7

1 files changed, 69 insertions, 0 deletions

diff --git a/epan/dissectors/packet-erf.h b/epan/dissectors/packet-erf.h
new file mode 100644
index 0000000000..c63a1ff7e6
--- /dev/null
+++ b/epan/dissectors/packet-erf.h
@@ -0,0 +1,69 @@
+/* packet-erf.h
+ * Routines for ERF encapsulation dissection
+ *
+ * Wireshark - Network traffic analyzer
+ * By Gerald Combs <gerald@wireshark.org>
+ * Copyright 1998 Gerald Combs
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; if not, write to the Free Software
+ * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
+ */
+#ifndef __PACKET_ERF_H_
+#define __PACKET_ERF_H_
+
+void proto_reg_handoff_erf(void);
+void proto_register_erf(void);
+
+struct erf_mc_hdlc_hdrx {
+  guint16 byte01;
+  guint8 byte2;
+  guint8 byte3;
+};
+
+struct erf_mc_raw_hdrx {
+  guint8 byte0;
+  guint16 byte12;
+  guint8 byte3;
+};
+
+struct erf_mc_atm_hdrx {
+  guint16 byte01;
+  guint8 byte2;
+  guint8 byte3;
+};
+
+struct erf_mc_aal5_hdrx {
+  guint16 byte01;
+  guint8 byte2;
+  guint8 byte3;
+};
+
+struct erf_mc_aal2_hdrx {
+  guint16 byte01;
+  guint8 byte2;
+  guint8 byte3;
+};
+
+struct erf_mc_rawl_hdrx {
+  guint16 byte01;
+  guint8 byte2;
+  guint8 byte3;
+};
+
+struct erf_eth_hdrx {
+  guint8 byte0;
+  guint8 byte1;
+};
+
+#endif