Hello, Guy,
Please, see below
08.06.2014 2:17, Guy Harris пишет:
OK, so all we would need to say on http://www.tcpdump.org/linktypes.html would
be:
LINKTYPE_whatever {number} DLT_whatever Trace data blocks, as
specified by Table 3-20 "Trace Data Block Format" in the PICMG HPM.2
specification
with "PICMG HPM.2 specification" linking to
http://www.picmg.org/v2internal/specifications2.cfm?thetype=One&thebusid=12 (that being
the closest thing we can provide to a link to the spec)?
Correct.
And a trace data block begins with
0 1 Trace Data Block Type
[7:6] Reserved
[5:4] Packet Type
0 – IPMI Trace Packet Data.
1 - Channel State Change Notification.
2 - Embedded ASCII message.
3 - Reserved.
[3:0] – IPMI Channel Number being traced.
and the HPM.2 spec describes the format of IPMI Trace Packet Data (either
directly or by referring to IPMI specs), the format of Channel State Change
Notifications, and the format of embedded ASCII messages?
Correct?
Correct.
Also, are the time stamps in pcap records or pcap-ng packet blocks significant,
given that the trace blocks contain their own time stamps?
They would not be significant, if Wireshark did not use them for
displaying packet times. But, since Wireshark does use them, then for
the sake of usability they are in fact significant and should match the
time stamps in the captured trace data blocks.
_______________________________________________
tcpdump-workers mailing list
tcpdump-workers@lists.tcpdump.org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers
