tcpdump mailing list archives

Re: IP Header Size is always 5


From: Sebastien Roy <Sebastien.Roy () Sun COM>
Date: Wed, 01 Apr 2009 11:22:55 -0400

On Wed, 2009-04-01 at 20:42 +0530, Shameem Ahamed wrote:
I was trying to create a function (for testing purpose) which displays
the header information for Ethernet, IP and TCP using a Linux machine.
The problem i am having is, whenever i read any packet from the saved
pcap file, it displays the IP header size (ip->ip_hl) is 5 (some times
less than 5).

The header length field in an IPv4 header is the length of the header in
32-bit words (not in bytes).  See RFC 791.

-Seb


-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.


Current thread: