SRX

last person joined: yesterday 

Ask questions and share experiences about the SRX Series, vSRX, and cSRX.

  • 1.  What is the meaning of Juniper Ethernet L2-header? (found in pcap)

     
    Posted 10-12-2015 02:59

    Hi Guys,

     

    Would like to know what is the purpose or meaning of this Juniper Ethernet L2-header? i found this in pcap and while comparing it with Cisco that have none additional header.

     

    Capture.JPG

     

    Thanks and Regards,

    Azry



  • 2.  RE: What is the meaning of Juniper Ethernet L2-header? (found in pcap)
    Best Answer

    Posted 10-12-2015 04:05

    Hi,

     

    That is the Magic-Number.  I am not 100% sure but I believe it is for identifying the file format and byte ordering of a PCAP file.

     

    In Wireshark this is defined in their routine:

     

    JUNIPER_PCAP_MAGIC 0x4d4743

     

    Some info can be found here:

     

    https://wiki.wireshark.org/Development/LibpcapFileFormat



  • 3.  RE: What is the meaning of Juniper Ethernet L2-header? (found in pcap)

     
    Posted 10-12-2015 07:25

    Thanks MMcD for the pointer. I get the idea now what this for and i believe this is wireshark programming code to identify where is this packet coming from. Some details as follow:

     

    https://github.com/wireshark/wireshark/blob/master/epan/dissectors/packet-juniper.c

     

    Regards,

    Azry