Hello Nelson,
>>> Nelson Law <NLAw@xxxxxxxxxxxxxxxxxxx> 01/10/08 9:36 PM >>>
> All the captures are captured from the switch port which is running
> EAPS directly and without using any mirroring port.
>
> Attached are the files for your ease of reference.
Your tagged Intel NIC trace dissects just fine, and it looks just like the
tagged EAPS traces I've captured with my 3Com NIC.
But your tagged Broadcom trace is obviously corrupted. The driver is
not correctly reporting the five octets starting at offset 0x15.
It looks like a buggy Broadcom NIC driver to me. I would check for
driver updates.
Unfortunatly my co-workers have also had problems when trying to
capture tagged data with their Broadcom based NICs (I don't know
what specific Broadcom NICs their machines might have had). For
that reason I am asked to get out my trusty old 3Com based 10/100
laptop when it is necessray to capture tagged frames.
Hope this helps,
Jim Young