Re: output format

[Guy Harris <gharris () sonic net>]

On Thu, Apr 17, 2003 at 05:13:54PM +1100, Andrew V. Sirotkin wrote:
> 000106 0:e0:18:1e:53:64 0:2:b3:ab:5e:f1 1324: 0.00:e0:18:1e:53:64.455 > 0.00:02:b3:ab:5e:f1.455: ipx-netbios 1276
> 001176 0:e0:18:1e:53:64 0:2:b3:ab:5e:f1 1514: 0.00:e0:18:1e:53:64.455 > 0.00:02:b3:ab:5e:f1.455: ipx-netbios 1467
> 000123 0:e0:18:1e:53:64 0:2:b3:ab:5e:f1 1514: 0.00:e0:18:1e:53:64.455 > 0.00:02:b3:ab:5e:f1.455: ipx-netbios 1467
>
> Tell me, please, what's meens the value on the end of lines (1267, 1476)?

The number of the IPX payload (length of packet minus length of all the
headers up to and including the IPX header).
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:tcpdump-workers-request () tcpdump org?body=unsubscribe