tcpdump mailing list archives

Re: DLT_ATM_RFC1483 link-layer length ?


From: Guy Harris <gharris () sonic net>
Date: Mon, 9 Dec 2002 23:57:40 -0800

On Wed, Nov 13, 2002 at 12:15:53PM +0100, Hannes Gredler wrote:
however as shown below tcpdump output insists on a 20-byte linkheader
for an LLC encapsulated frame [0606 is the LLCSAP_IP]

./tcpdump -n -e -x -r bootp.tcpdump

Why does the control field byte in the 802.2 LLC header of the BOOTP
packets in that capture have the value 0 rather than 3?  (It's supposed
to be a UI frame, right?)

And what are all the frames *before* the first BOOTP frame?
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:tcpdump-workers-request () tcpdump org?body=unsubscribe


Current thread: