Wireshark · Ethereal-users: [ethereal-users] Re: [tcpdump-workers] Problems viewing SNMP trap packets

[Craig Rodrigues <rodrigc@xxxxxxxxxxxx>]

Hi,

I don't know if this is any help, but I ran tcpdump -d port 162
with the tcpdump from tcpdump.org and Redhat 6.1.

>From Redhat 6.1:

(000) ldh      [-4096]
(001) jeq      #0x86dd          jt 2	jf 9
(002) ldb      [6]
(003) jeq      #0x6             jt 5	jf 4
(004) jeq      #0x11            jt 5	jf 21
(005) ldh      [40]
(006) jeq      #0xa2            jt 20	jf 7
(007) ldh      [42]
(008) jeq      #0xa2            jt 20	jf 21
(009) jeq      #0x800           jt 10	jf 21
(010) ldb      [9]
(011) jeq      #0x6             jt 13	jf 12
(012) jeq      #0x11            jt 13	jf 21
(013) ldh      [6]
(014) jset     #0x1fff          jt 21	jf 15
(015) ldxb     4*([0]&0xf)
(016) ldh      [x + 0]
(017) jeq      #0xa2            jt 20	jf 18
(018) ldh      [x + 2]
(019) jeq      #0xa2            jt 20	jf 21
(020) ret      #65535
(021) ret      #0

>From tcpdump.org:

(000) ldh      [12]
(001) jeq      #0x800           jt 2	jf 13
(002) ldb      [23]
(003) jeq      #0x6             jt 5	jf 4
(004) jeq      #0x11            jt 5	jf 13
(005) ldh      [20]
(006) jset     #0x1fff          jt 13	jf 7
(007) ldxb     4*([14]&0xf)
(008) ldh      [x + 14]
(009) jeq      #0xa2            jt 12	jf 10
(010) ldh      [x + 16]
(011) jeq      #0xa2            jt 12	jf 13
(012) ret      #68
(013) ret      #0

I'm a bit lost here...:)
-- 
Craig Rodrigues        
http://www.gis.net/~craigr    
rodrigc@xxxxxxxxxxxx