🚀 go-pugleaf

I have a quick perl script that will break apart Phase2 ET so this 
output from tcpdump:

16:13:00.170824 towergate 8:0:7:94:38:e7 0021 46:
                         aaaa 0308 0007 809b 0419 6f76 7241 7280
                         1470 8099 0360 0186 7b96 0100 0096 0800
                         3700 4500 5700 0107 7068 6f65 6e69
16:13:00.176435 8:0:7:94:38:e7 towergate 0021 46:
                         aaaa 0308 0007 809b 0019 0000 7280 7241
                         7014 9980 0390 0086 7b96 0200 0000 00ff
                         ff50 5365 7276 6572 0a50 555f 3131
16:13:00.184064 towergate 8:0:7:94:38:e7 001d 46:
                         aaaa 0308 0007 809b 0415 e5d6 7241 7280
                         1470 8099 03c0 0086 7b96 0100 000d 1a72
                         0017 01a7 24b0 4403 36d1 5018 0800

Looks like this (etdc -p -f iig.data2):

Decodeing ATP as PAP


16:13:00.170824 towergate 8:0:7:94:38:e7 0021 46:
DDP HEADER:
Header: aaaa03080007809b        Hops: 01        Length: 0019    ChkSum: 6f76
Dest: 7241.14.80 Src: 7280.70.99        DDPType: 03
ATP HEADER:     CONTRLINFO: TREQ XO     SEQNUM: 01      TID: 867b
PAP HEADER:     ConnID: 96      CMD: OpenConn   ATPRSSN: 96     FlowQuantum: 08
WaitTime: 0037


16:13:00.176435 8:0:7:94:38:e7 towergate 0021 46:
DDP HEADER:
Header: aaaa03080007809b        Hops: 00        Length: 0019    ChkSum: 0000
Dest: 7280.70.99 Src: 7241.14.80        DDPType: 03
ATP HEADER:     CONTRLINFO: TRESP EOM   SEQNUM: 00      TID: 867b
PAP HEADER:     ConnID: 96      CMD: OpenConnReply      ATPRSSN: 00     FlowQuantum: 00 Result: ffff
STATUS: P


16:13:00.184064 towergate 8:0:7:94:38:e7 001d 46:
DDP HEADER:
Header: aaaa03080007809b        Hops: 01        Length: 0015    ChkSum: e5d6
Dest: 7241.14.80 Src: 7280.70.99        DDPType: 03
ATP HEADER:     CONTRLINFO: TREL        SEQNUM: 00      TID: 867b
PAP HEADER:     ConnID: 96      CMD: OpenConn   ATPRSSN: 0d     FlowQuantum: 1a
WaitTime: 7200



It was a quick script to debug some printing problems, not many comments,
surely a bug or two, and not finished.  Someone may find it useful.
Use it at your own risk.  Send problems to me, if I have time, I
will fix them.  



-- 
William J. Sproule - Networking  	Princeton University
UUCP:     	...princeton!sproule	87 Prospect Ave.
INTERNET:	sproule@Princeton.EDU	Princeton, NJ   08544
BITNET:		SPROULE@PUCC		VOICE: 609-258-6089  FAX: 609-258-3943

manpage someone here wrote:

.TH ETDC 1 "13 November 1992" "" CIT
.SH NAME
etdc \- decode EtherTalk packets from tcpdump
.SH SYNTAX
.B etdc
.B \-a | \-p
[
.B \-v
] [
.B \-f
.I file
]
.SH DESCRIPTION
.NXR "etdc command"
.NXR "EtherTalk" "analyzing"
The \fIetdc\fP command will decode \fIEtherTalk\fP packets from
tcpdump output.  It will read either from \fIstdin\fP or from a file.
.PP
\fIetdc\fP would typically be used as part of a pipeline, fed by \fBtcpdump\fP.
An example of this would be:
.RS
.nf

.B "tcpdump \-s 1000 ether host jelly | etdc \-a"
.fi
.RE
.SH OPTIONS
.TP
.B \-a
Decode ATP packets as \fIASP\fP packets.
.TP
.B \-p
Decode ATP packets as \fIPAP\fP packets.
.TP
.B \-v
Go into maximum verbosity mode.
.TP
.B \-f
Use \fIfile\fP as input. Otherwise, use \fIstdin\fP.
.SH AUTHOR