Thanks for the info,
That's what I kind of figured, my application is not really creating Ethernet
frames its just replicating the bit pattern from RF frames and sending them
out the Ethernet interface (what Ethereal decodes as the Source and Destination
MAC are not actual MAC addresses either). The interesting thing is that
Sniffer Pro will read in the entire bit pattern, I was just looking for a
way to do it in a UNIX environment.
Guy Harris wrote:
On Thu, Apr 25, 2002 at 12:39:13PM -0400, Jeff Riddel wrote:
I'm using Tethereal/Ethereal in conjuction with an application that
places RF packets in Ethernet frames. I can see the hex frames with
Tethereal/Ethereal, however the frames are cut off because Ethereal
interprets the Ethernet length field (bytes 13&14) as the actual length
field and cuts off most of my data. Is there any way to make Ethereal
ignore the Ethernet length field and print out all the data it receives ?
No. Ethereal assumes people follow the IEEE specs when putting packets
onto an Ethernet, and dissects the packets as appropriate for that.
Is there any way to have your application use the Ethernet length/type
field as the IEEE specs say it should be used, i.e. as a length field
(if < 1500) or a type field (if >= 1500)?
_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users