-----Ursprüngliche Nachricht----- Von: [email protected] [mailto:[email protected]] Im Auftrag von Guy Harris Gesendet: Mittwoch, 14. September 2011 01:08 An: [email protected] Betreff: Re: [tcpdump-workers] Request for new Link-layer header type
>On Sep 6, 2011, at 11:01 PM, <[email protected]> >><[email protected]> wrote: > >> >>> Will there ever be both "normal mode" and "transparent mode" packets >> in >>> the same capture file? If not, perhaps transparent mode should have >> its >>> own link-layer type value. >> >> The two modes will never be mixed up in one file. Having a second >> link-layer type would be nice. > >So the preamble is the 7 octets described in section 3.2.1 of IEEE 802.3->2008 >(0xAA 0xAA 0xAA 0xAA 0xAA 0xAA 0xAA, if the frame is valid), and the >SFD is >the octet described in section 3.2.2 (0xAB, if the frame is valid)?- Yes, that's right, these are the sequences described in sections 3.2.1 and 3.2.2. Even though, in hexadecimal notation this would be 0x55 0x55 0x55 0x55 0x55 0x55 0x55 and 0xd5, respectively (as denoted in section 3.3) Regards, Holger Hilscher Gesellschaft für Systemautomation mbH Rheinstr. 15, 65795 Hattersheim Sitz der Gesellschaft: Hattersheim Geschäftsführer: Hans-Jürgen Hilscher Registergericht: Amtsgericht Frankfurt/Main Handelsregister: Frankfurt B 26873 www.hilscher.com - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.
