Ethereal-dev: [Ethereal-dev] Re: [Ethereal-users] ARP decoding problems

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date: Wed, 11 Oct 2000 09:46:36 -0500
Ethereal is decoding the data correctly. There really are 6 00's in the
data. On what OS did you
capture this packet?

--gilbert

Shawn Starr <spstarr@xxxxxxxxxxxxxxxxxxxxxx> on 10/10/2000 06:39:19 PM

To:   Gilbert Ramirez/Tivoli Systems@Tivoli Systems
cc:
Subject:  Re: [Ethereal-users] ARP decoding problems





Yes here's one packet.

I dont know if its the capturing or decoding but a network engineer of
mine said thats not right.

On Tue, 10 Oct 2000 Gilbert_Ramirez@xxxxxxxxxx wrote:

> Can you provide a sample trace file?
>
> --gilbert
>
> Shawn Starr <spstarr@xxxxxxxxxxxxxxxxxxxxxx> on 10/10/2000 07:13:32 AM
>
> To:   ethereal-users@xxxxxxxxxxxx
> cc:    (bcc: Gilbert Ramirez/Tivoli Systems)
> Subject:  [Ethereal-users] ARP decoding problems
>
>
>
>
> libpcap: 0.4
> libz: 1.1.3
> UCD SNMP 4.1.2
> Ethereal: 0.8.12
>
> Line: 0020: on the decoding of arps shows incorrect information
> Target hardware address: 00:00:00:00:00
>
> is always 12 0's?
>
> Isn't this supposed to be the destination of the MAC address of machine
> its trying to reach?
>
> im confused on this
>
> I have attach 2 PNG images comparing this with another scanner and they
> look very different on the decoding.
>
> Shawn.
>
>


Attachment: packet
Description: Binary data