On Wed, Nov 13, 2002 at 12:15:53PM +0100, Hannes Gredler wrote: > however as shown below tcpdump output insists on a 20-byte linkheader > for an LLC encapsulated frame [0606 is the LLCSAP_IP] > > ./tcpdump -n -e -x -r bootp.tcpdump
Why does the control field byte in the 802.2 LLC header of the BOOTP packets in that capture have the value 0 rather than 3? (It's supposed to be a UI frame, right?) And what are all the frames *before* the first BOOTP frame? - This is the TCPDUMP workers list. It is archived at http://www.tcpdump.org/lists/workers/index.html To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
