Re: error-message "IP11 truncated-ip" in last tcpdump/libpcap

[Guy Harris <guy () alum mit edu>]

On Mon, Jul 12, 2004 at 03:13:33PM +0200, Klaus Schrod wrote:
> Does anybody have any idea why we still get this error?

Because, for whatever reason, the dissector for the protocol atop which
the purported IP traffic is running thinks it's IP even though it isn't?
(The version field has 11, not 4 or 6, in it.)

Could you send us a capture file with this problem?  We'd probably need
that in order to figure out why it's happening.
-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.