[andreas.sikkema@xxxxxxxxxxx]

Hi,

See attached capture, a client does a RARP request,
Client A asks who is MAC(B), tell MAC(A)
Server S replies MAC(S) is at IP(S)

This does not seem right I suppose ;-)

I don't know packet-arp well enough, but I changed in
all calls to col_add_fstr() which add the string
"(%s is at %s)" (or variations there of) from sha_str
and spa_str to tha_str and tpa_str. Now it displays
this which looks better to me:

Client A asks who is MAC(B), tell MAC(A)
Server S replies MAC(B) is at IP(B)

I had to change around 4 functions, the one which did
the trick is in dissect_arp(), the second time "is at" is
being added to the information column.

(See attached file: rarp2.cap)

--
Andreas Sikkema
andreas.sikkema@xxxxxxxxxxx
"While you're waiting, read the free novel we sent you.
 It's a Spanish story about a guy named `Manual'" - Dilbert

Attachment: rarp2.cap
Description: Binary data