[c-nsp] RSPAN over IP

Saku Ytti saku+cisco-nsp at ytti.fi
Mon Jul 9 02:08:30 EDT 2007


On (2007-07-08 20:58 +0200), Joerg Mayer wrote:
 
> Urgs, that's not true. It has the code to do the decoding, but
> unfortunately can't recognize the media type yet, as cisco in it's
> wisdom reused an existing media type and didn't register their own :-(
> That's something that's still missing. For all practical purposes
> Wireshark doesn't support ERSPAN, until I implement some heuristic
> to decide whether the packet is ERSPAN or what the media type says.

And I gather the 8 byte ERSPAN header isn't always unambiguous?

-- 
  ++ytti


More information about the cisco-nsp mailing list