tcpdump mailing list archives

can someone tell me what this means


From: Uncle George <gatgul () gatworks com>
Date: Sat, 19 Jul 2003 21:39:54 -0400

1) the "snap 0:0:f8:8:6"
2) the "(0:2:2d:91:3a:82)" of the arp reply ?

With regular wired tcp i do not get the snap mesages. The wireless connections appear to get these added ( snap ) codes.

21:13:30.820748 snap 0:0:f8:8:6 arp who-has 192.168.1.1 tell 192.168.1.68
21:14:02.829817 snap 0:0:f8:8:6 arp who-has 192.168.1.68 (Broadcast) tell 0.0.0.0 21:14:03.844022 snap 0:0:f8:8:6 arp reply 192.168.1.68 is-at 0:2:2d:91:3a:82 (0:2:2d:91:3a:82) 21:14:05.856213 snap 0:0:f8:8:6 arp who-has 192.168.1.68 (Broadcast) tell 192.168.1.68 21:19:25.016177 snap 0:0:f8:8:6 arp who-has 192.168.1.68 (Broadcast) tell 0.0.0.0 21:19:26.031710 snap 0:0:f8:8:6 arp reply 192.168.1.68 is-at 0:2:2d:91:3a:82 (0:2:2d:91:3a:82) 21:19:28.045261 snap 0:0:f8:8:6 arp who-has 192.168.1.68 (Broadcast) tell 192.168.1.68
21:19:56.010611 snap 0:0:f8:8:6 arp who-has 192.168.1.35 tell 192.168.1.68
21:19:57.009717 snap 0:0:f8:8:6 arp who-has 192.168.1.35 tell 192.168.1.68

-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:tcpdump-workers-request () tcpdump org?body=unsubscribe


Current thread: