Re: : Idea for corrupted packet decoding

[Anders Broman <anders.broman () ericsson com>]

Hi,
Look into text2pcap...
/Anders 

-----Original Message-----
From: wireshark-users-bounces () wireshark org [mailto:wireshark-users-bounces () wireshark org] On Behalf Of Putrycy
Sent: den 29 juni 2010 12:27
To: wireshark-users () wireshark org
Subject: [Wireshark-users] : Idea for corrupted packet decoding

Hi everyone,

 I am developing piece of software, related to TCPIP stack. I have a weird problems, and no idea for how to diagnose 
em. Problem is : packets are getting malformed. Seeing em in wireshark helps a lot. Packets seem to be trimmed at the 
beginning and moved left (Ethernet II -> MACs) at exactly 2 bytes.
Id like to make sure, they're not malformed in any other way. My idea would be to add those missing two bytes by hand, 
and then try to "decode" packet that was prepared like that. Problem is im not sure how to make it. Id be very grateful 
for any help:

Here's an example:

correct destination mac: a:b:c:d:e:f
correct source mac: o:p:q:r:s:t

These are malformed like:

dest mac: c:d:e:f:o:p
src mac: q:r:s:t:X:X
where X is something incorrect.

Thanks a lot for any suggestions.

P.
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe