Ethereal-users: [Ethereal-users] RE: How to Ignore the Ethernet Length Field

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "David Erickson" <swtools@xxxxxxxxxxxxx>
Date: Thu, 25 Apr 2002 10:34:10 -0700
Bytes 13 & 14 in the ethernet header are the ether_type
field.  e.g. ETHERTYPE_IP = 0x0800, ETHERTYPE_ARP = 0x0806,
etc.  Once the ether_type is known, the packet length is
determined by looking in the appropriate place.  e.g. for
an IP packet, the length is the third byte in the IP header.

Perhaps the real problem here is that the ether_type for
the RF packets is not known to ethereal, or is not set
correctly by the application that frames the RF packets.

-Dave

-----Original Message-----
From: Jeff Riddel <jriddel@xxxxxxxxx>
To: ethereal-users@xxxxxxxxxxxx
Subject: [Ethereal-users] How to Ignore the Ethernet Length Field in
Ethereal or Tethereal

Hi,

  I'm using Tethereal/Ethereal in conjuction with an application that
places RF packets in Ethernet frames.  I can see the hex frames with
Tethereal/Ethereal, however the frames are cut off because Ethereal
interprets the Ethernet length field (bytes 13&14) as the actual length
field and cuts off most of my data.  Is there any way to make Ethereal
ignore the Ethernet length field and print out all the data it receives ?

Thanks,
Jeff Riddel
Cisco Systems, Inc





--__--__--

_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users


End of Ethereal-users Digest