tcpdump mailing list archives

Re: decode MPLS-contained packets?


From: Francois-Xavier Le Bail via tcpdump-workers <tcpdump-workers () lists tcpdump org>
Date: Thu, 7 May 2020 03:04:09 -0400 (EDT)

--- Begin Message --- From: Francois-Xavier Le Bail <devel.fx.lebail () orange fr>
Date: Thu, 7 May 2020 09:06:02 +0200
On 07/05/2020 08:53, Guy Harris via tcpdump-workers wrote:

"Looks like a valid Ethernet address" is defined as "the first three octets appear in Wireshark's file giving 
manufacturer names for OUIs".
What if the destination address is ff:ff:ff:ff:ff:ff (broadcast) for e.g. ARP request ?
Or some multicast address ?

-- 
Francois-Xavier

--- End Message ---
_______________________________________________
tcpdump-workers mailing list
tcpdump-workers () lists tcpdump org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers

Current thread: