From owner-freebsd-questions Thu Mar 5 12:24:53 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id MAA14053 for freebsd-questions-outgoing; Thu, 5 Mar 1998 12:24:53 -0800 (PST) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from pericles.aipo.gov.au (pericles.aipo.gov.au [202.14.186.30]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id MAA14045 for ; Thu, 5 Mar 1998 12:24:39 -0800 (PST) (envelope-from Stanley.Hopcroft@ipaustralia.gov.au) From: Stanley.Hopcroft@ipaustralia.gov.au Received: (from smap@localhost) by pericles.aipo.gov.au (8.8.5/8.6.12) id HAA02543 for ; Fri, 6 Mar 1998 07:24:07 +1100 (EST) X-Authentication-Warning: pericles.aipo.gov.au: smap set sender to using -f Received: from notes.aipo.gov.au(192.3.1.11) by pericles.aipo.gov.au via smap (V2.0) id xma002541; Fri, 6 Mar 98 07:23:40 +1100 Received: by notes.aipo.gov.au(Lotus SMTP MTA v1.05b4 (287.3 12-16-1996)) id 4A2565BE.0075652D ; Fri, 6 Mar 1998 07:22:16 +1000 X-Lotus-FromDomain: INTERNET To: freebsd-questions@FreeBSD.ORG Message-ID: <4A2565BE.00756170.00@notes.aipo.gov.au> Date: Fri, 6 Mar 1998 07:28:54 +1000 Subject: Tcpdump problems: LLC2 decode is incorrect ? Mime-Version: 1.0 Content-type: text/plain; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Dear Ladies and Gentlemen, I am writing to ask if any one has found problems with the LLC2 decode in tcpdump. tcpdump writes llc2 headers with protocols such as . fddi . 802.3/SNAP/IP . Ethernet | 802.3/LLC2/NetBEUI Here is an example where tcpdump (-x -s200) decodes the control bytes 0x01e5 as an RR with Number Received 0, whereas I think it should be an RR with Number Received = 114 (ie hex(e5 >>1)) 18:42:22.789598 0:20:35:43:3f:e3 > 0:20:35:71:f2:e8 sap f0 rr (r=0,C) len=42 f0f001e5000000000000000000000000 rr Nr 114 I think tcpdump is a wonderful tool so its more likely I am wrong. The FreeBSD 2.2.5 tcpdump seems to behave the same as the latest version (3.46 ?) from ftp.ee.lbl.gov. Thank you, Yours sincerely To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message