Ethereal-users: [Ethereal-users] forcing decode offset

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: "Giles Scott" <gscott@xxxxxxxxxx>
Date: Mon, 14 May 2001 17:29:14 +0100
Please ignore, worked it out upgraded to 0.8.16

thanks

Giles



Hi

Is it possible for ethereal to be configured to start decodeing from
acertain offset in a packet.

I am looking at an issue where the MAC layer is corrupt but the IP
information is vaild.
I would like to decode IP starting at offset 0x10

This is on a ethernet network.

Frame 1 (64 on wire, 64 captured)
    Arrival Time: Apr 19, 2001 10:20:05.2578
    Time delta from previous packet: 0.000000 seconds
    Time relative to first packet: 0.000000 seconds
    Frame Number: 1
    Packet Length: 64 bytes
    Capture Length: 64 bytes
Ethernet II
    Destination: 00:03:47:08:71:59 (00:03:47:08:71:59)
    Source: 00:60:81:00:00:05 (00:60:81:00:00:05)
    Type: Unknown (0xcf44)
Data (50 bytes)

   0  0003 4708 7159 0060 8100 0005 cf44 0930   ..G.qY.`.....D.0
  10  0800 4500 0028 5cbd 4000 7c06 0f3d c0a8   ..E..(\.@.|..=..
  20  0c65 c0a8 0520 0c64 115e d28d 25ad b910   .e... .d.^..%...
  30  44d5 5010 2238 e6e3 0000 5555 5555 5555   D.P."8....UUUUUU


Cheers

Giles Scott
Alteon Websystems