Sniffer PDK Woes

[bbggcc]

I am trying to override/bind to the existing 802.1D BPDU protocol to augment for the extra data in 802.1S multiple spanning tree BPDU's.

I have compiled and successfully attached a protocol by ethertype but can't figure out how to attach/override the existing BPDU decoder.

Perhaps I can override based on MAC destination address
01:80:C2:00:00:00 ? I don't know the trick to that though as I haven't written a "base" protocol.

Thanks,

Bruce

 

[rsangi]

Hi,

You can override the existing protocol with a new protocol decode. I don't know much about 802.1 protocol.

But the general procedure is,

1. What is the base protocol for 802.1 ?.
2. Is it based on some port number or some heuristics?.
3. If it is based on Port number, then it is much easier. You can create a new .pds project with settings of binding to Base protocol.

Hope this helps,

rsangi