On 02/ 3/10 11:23 AM, Darren Reed wrote:
Rather than the usual 14 bytes, you've got 18 bytes prepended to your
IP packets.
The confusing part is the 2 bytes in front of the MAC addresses and
the 2 bytes between the MAC addresses and the ethernet type.
given that my network works (I observe this whilst typing this email on
the laptop that has the defect) and also snoop does the right thing, I'd
say this looks like a defect in libpcap or?
These all appear to be broadcast packets of one type or another.
Here's a few more (http requests to blogs.sun.com) I have a hard time
creating a filter that makes sense though:-)
11:47:20.083350 e0:19:e9:25:00:23 (oui Unknown) > 08:02:2c:00:00:1d (oui
Unknown), ethertype Unknown (0x69ae), length 222:
0x0000: 0b1c 0023 69ae 0b1a 506d aaaa 0300 0000 ...#i...Pm......
0x0010: 0800 4560 00be d72c 4000 3506 e762 4805 ..E`...,@.5..bH.
0x0020: 7c38 c0a8 0165 0050 966c 994d 8c7d aa69 |8...e.P.l.M.}.i
0x0030: c424 8018 8218 d559 0000 0101 080a c287 .$.....Y........
0x0040: 3835 0010 948c 4854 5450 2f31 2e31 2033 85....HTTP/1.1.3
0x0050: 3034 2055 7365 206c 6f63 616c 2063 6f70 04.Use.local.cop
0x0060: 790d 0a53 6572 7665 723a 2053 756e 2d4a y..Server:.Sun-J
0x0070: 6176 612d 5379 7374 656d 2d57 6562 2d53 ava-System-Web-S
0x0080: 6572 7665 722f 372e 300d 0a44 6174 653a erver/7.0..Date:
0x0090: 2057 6564 2c20 3033 2046 6562 2032 3031 .Wed,.03.Feb.201
0x00a0: 3020 3130 3a34 393a 3235 2047 4d54 0d0a 0.10:49:25.GMT..
0x00b0: 582d 726f 626f 7473 2d74 6167 3a20 6e6f X-robots-tag:.no
0x00c0: 696e 6465 782c 666f 6c6c 6f77 0d0a 0d0a index,follow....
11:47:20.083461 69:ae:0b:1c:00:1d (oui Unknown) > 08:41:00:00:00:23 (oui
Unknown), ethertype Unknown (0xe019), length 92:
0x0000: e925 0023 69ae 0b1a 0000 0000 0000 0000 .%.#i...........
0x0010: 0000 aaaa 0300 0000 0800 4500 0034 0298 ..........E..4..
0x0020: 4000 4006 b1e1 c0a8 0165 4805 7c38 966c @[email protected].|8.l
0x0030: 0050 aa69 c424 994d 8d07 8010 fbb4 39ae .P.i.$.M......9.
0x0040: 0000 0101 080a 0010 94a2 c287 3835 ............85
11:47:20.085674 e0:19:e9:25:00:23 (oui Unknown) > 08:02:2c:00:00:1d (oui
Unknown), ethertype Unknown (0x69ae), length 222:
0x0000: 0b1c 0023 69ae 0b1a 606d aaaa 0300 0000 ...#i...`m......
0x0010: 0800 4560 00be d72d 4000 3506 e761 4805 ..e`[email protected].
0x0020: 7c38 c0a8 0165 0050 d20f 5d5b 19d6 aa5f |8...e.P..][..._
0x0030: f58a 8018 8218 16f4 0000 0101 080a c287 ................
0x0040: 3835 0010 948c 4854 5450 2f31 2e31 2033 85....HTTP/1.1.3
0x0050: 3034 2055 7365 206c 6f63 616c 2063 6f70 04.Use.local.cop
0x0060: 790d 0a53 6572 7665 723a 2053 756e 2d4a y..Server:.Sun-J
0x0070: 6176 612d 5379 7374 656d 2d57 6562 2d53 ava-System-Web-S
0x0080: 6572 7665 722f 372e 300d 0a44 6174 653a erver/7.0..Date:
0x0090: 2057 6564 2c20 3033 2046 6562 2032 3031 .Wed,.03.Feb.201
0x00a0: 3020 3130 3a34 393a 3235 2047 4d54 0d0a 0.10:49:25.GMT..
0x00b0: 582d 726f 626f 7473 2d74 6167 3a20 6e6f X-robots-tag:.no
0x00c0: 696e 6465 782c 666f 6c6c 6f77 0d0a 0d0a index,follow....
11:47:20.217169 69:ae:0b:1c:00:1d (oui Unknown) > 08:41:00:00:00:23 (oui
Unknown), ethertype Unknown (0xe019), length 92:
0x0000: e925 0023 69ae 0b1a 0000 0000 0000 0000 .%.#i...........
0x0010: 0000 aaaa 0300 0000 0800 4500 0034 0299 ..........E..4..
0x0020: 4000 4006 b1e0 c0a8 0165 4805 7c38 d20f @[email protected].|8..
0x0030: 0050 aa5f f58a 5d5b 1a60 8010 fbb4 7b3b .P._..][.`....{;
0x0040: 0000 0101 080a 0010 94af c287 3835 ............85
11:47:29.631080 e0:19:e9:25:00:23 (oui Unknown) > 08:02:2c:00:00:1d (oui
Unknown), ethertype Unknown (0x69ae), length 72:
0x0000: 0b1c 0023 69ae 0b1a 4073 aaaa 0300 0000 ...#i...@s......
0x0010: 0800 4560 0028 c828 4000 f306 35d5 42eb ..E`.(.(@...5.B.
0x0020: 8479 c0a8 0165 0050 8277 fc54 e4f9 aa6c .y...e.P.w.T...l
0x0030: 8f5c 5014 19c4 6ebb 0000 .\P...n...
Antoon Huiskens wrote:
$ pfexec tcpdump -v -X -s 1536 -c 3 -i iwk0 tcpdump: listening on
iwk0, link-type EN10MB (Ethernet), capture size 1536 bytes
13:00:08.382924 ff:ff:ff:ff:00:0b (oui Unknown) > 08:22:00:00:ff:ff
(oui Unknown), ethertype Unknown (0x0e9e), length 110: 0x0000:
4340 001d e019 ead1 7054 aaaa 0300 0000 [email protected]......
0x0010: 0800 4500 004e 7c19 0000 8011 c689 0a00 ..E..N|.........
0x0020: e3fc 0a00 ffff 0089 0089 003a f94c 87a1 ...........:.L..
0x0030: 0110 0001 0000 0000 0000 2046 4446 4645 ...........FDFFE
0x0040: 4f43 4e45 4244 4644 4a44 4145 4444 4845 OCNEBDFDJDAEDDHE
0x0050: 4345 4344 4945 4745 4341 4100 0020 0001 CECDIEGECAA.....
13:00:08.383053 ff:ff:ff:ff:00:0b (oui Unknown) > 08:02:00:00:ff:ff
(oui Unknown), ethertype Unknown (0x0e9e), length 110: 0x0000:
4340 001f 3bc0 37bd 8054 aaaa 0300 0000 c...@..;.7..T......
0x0010: 0800 4500 004e 0071 0000 8011 3266 0a00 ..E..N.q....2f..
0x0020: f3c8 0a00 ffff 0089 0089 003a 2f19 8013 ...........:/...
0x0030: 0110 0001 0000 0000 0000 2045 4a46 4445 ...........EJFDE
0x0040: 4246 4545 4246 4143 4143 4143 4143 4143 BFEEBFACACACACAC
0x0050: 4143 4143 4143 4143 4141 4100 0020 0001 ACACACACAAA.....
13:00:08.485307 00:00:00:02:00:0b (oui Ethernet) > 08:02:00:00:33:33
(oui Unknown), ethertype Unknown (0x0e9e), length 88: 0x0000:
4340 001f 5bbe 892b a054 aaaa 0300 0000 c...@..[..+.t......
0x0010: 86dd 6000 0000 0010 3aff fe80 0000 0000 ..`.....:.......
0x0020: 0000 021f 5bff febe 892b ff02 0000 0000 ....[....+......
0x0030: 0000 0000 0000 0000 0002 8500 b11c 0000 ................
0x0040: 0000 0101 001f 5bbe 892b ......[..+
_______________________________________________
networking-discuss mailing list
[email protected]
