On Sat, Jul 13, 2002 at 01:43:28AM -0700, Guy Harris wrote: > The frames in "concatenated.enc" looks reasonable at the Ethernet and IP > layers... > > ...but not at the TCP layers; the TCP headers look, well, *weird*, with > port numbers of 2 and 0, and the like. > > However, the TCP checksum is claimed to be correct. > > Any idea what's going on there?
"phone_call_DSA_tellabs.enc" is a bit odd as well - a bunch of frames have weird Ethernet types such as 0xd73b, but the payload looks as if it might be SGCP.
