Ethereal-users: Re: [Ethereal-users] Mis-decoded packet?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Joerg Mayer <jmayer@xxxxxxxxx>
Date: Fri, 13 Sep 2002 20:41:58 +0200
On Fri, Sep 13, 2002 at 11:39:34AM -0500, Berry, Richard wrote:
> ADDR  HEX                                               ASCII
> 0000: 01 00 5e 00 00 02 00 00 0c 07 ac 01 08 00 45 c0 | ..^.......¬...EÀ
> 0010: 00 30 5e a3 00 00 01 11 34 d3 a1 82 a4 02 e0 00 | .0^£....4Ó¡'?.à.
> 0020: 00 02 00 a1 07 c1 00 1c 29 80 00 00 10 03 0a ff | ...¡.Á..)EUR.....ÿ
> 0030: 01 00 63 69 73 63 6f 00 00 00 a1 82 a4 fa 3c 10 | ..cisco...¡'?ú<.
> 0040: 32 e3                                           | 2ã
>  
> Is this a decode issue for Ethereal?

udp src-port = 0x00a1= 161 (snmp), udp dst-port = 0x07c1 = 1985 (hsrp)
The lower number wins. Turn off snmp dissection and this should decode
properly. Is the device sending this a cisco router?

 Ciao
         Jörg


--
Joerg Mayer                                          <jmayer@xxxxxxxxx>
I found out that "pro" means "instead of" (as in proconsul). Now I know
what proactive means.