Re: can someone tell me what this means

[David Young <dyoung () pobox com>]

On Sat, Jul 19, 2003 at 09:39:54PM -0400, Uncle George wrote:
> 1) the "snap 0:0:f8:8:6"
> 2) the "(0:2:2d:91:3a:82)" of the arp reply ?

  The SNAP code is part of the 802.2 Link Level Control (LLC) header.
  It is needed because the 802.11 frame header does not reserve any space
  for an Ethernet type code, which the network stack needs to decide which
  protocol to deliver the packet to (IP, ARP, ISO, NetWare, AppleTalk).
  The 802.2 header is a standard container for that information which
  goes between the 802.11 header and the IP/ARP header.

  Make sense?

  I would have to read the tcpdump source to find out what the
  parenthesized MAC address means.

Dave

-- 
David Young             OJC Technologies
dyoung () ojctech com      Urbana, IL * (217) 278-3933
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:tcpdump-workers-request () tcpdump org?body=unsubscribe