DSS - WAN-Link with Nortel Welfleet-Standard on Layer2

[FBarthel]

Hi guys,

i have a big prolem with a customer doing Nortel-Networks Welfleet-Standard over a Leased-Line WAN-Link.
I have placed a Distributed Sniffer with the LM2000-WAN-Nic to sniffer the traffic.

I´ve created a filter that the captured data is written to a file (so the online-expert is disabled).
The online monitor applications like protocol-distribution are showing the right data under the chosen layer2-protocol "Cisco-HDLC".

But when i open the capture-file, in the expert-system i only see one object on the DLC-layer called DTE-DCE (the physical link).
On the decode tab i only see the layer2-information called "router cisco", but nothing more.
The frames are captured correctly because the length of the frames is correct.

My question:
What protocol under the tools-Options-WAN-Protocol must i select to become a correct decode of the frames ???

The only HDLC-Type there is Cisco-HDLC (and Cisco is the biggest and the best - but some customers are still on Nortel-Equipment).

Thanx for your answer (and sorry for my bad english, I am german).

Frank Barthel
German Telekom, CCO

 

[LanGuru]

Choose the "other router/bridge" option. Also try the autodiscovery mecahnism to detect the wan encapsulation. If that does not do it then it may be neccessary to also enable protocol forcing to properly decode the frames.

 

[kabeela]

We run Wellfleet standard and have encountered this at version 4.1 phase 2. Our DSS seems to think that every frame has CRC errors, so those frames are not included/displayed in real time. NAI knows about this. The workaround has been to do protocol forcing, skip 16 bytes from frame start and decode IP. CRC is not calculated when forcing, so all packets are then shown. Use the other router/bridge option.

PS: Biggest does not equal best. For example, I understand David Hasselhoff is really big over there...

 

[SpenceP]

Hi Everyone,

Unfortunately, Sniffer does not decode WCP protocol. The only network Analyzer that does this well is the NetVCR product from Niksun (

http://www.niksun.com).

They decompress WCP traffic and store it uncompressed on their raid disks. It can then be exported to Sniffer format or decoded using the Niksun tools. These guys capture files can go up to 730GB in size which is so cool. No hoping to have the data from several days ago when I major problem starting!! Export to Sniffer gives you the ability to still use the tools you are used to as well. (They can do the same for the Cisco STAC protocol as well!! According to the Niksun web site, the German distributor is a company called Datakom (

http://www.datakom.de)

so they should be able to help you out.

SpenceP

 

[Guest_imported]

can any one pls tell me, how can i decode a NetSniffer captured packets. I captured some packets from Lan but i can't find anythings because i don't anythings about packet capturing. I will be thankful to him who will describe me and teach be about packet decoding.


pam king