On Sat, Jul 19, 2003 at 09:39:54PM -0400, Uncle George wrote: > 1) the "snap 0:0:f8:8:6" > 2) the "(0:2:2d:91:3a:82)" of the arp reply ?
The SNAP code is part of the 802.2 Link Level Control (LLC) header. It is needed because the 802.11 frame header does not reserve any space for an Ethernet type code, which the network stack needs to decide which protocol to deliver the packet to (IP, ARP, ISO, NetWare, AppleTalk). The 802.2 header is a standard container for that information which goes between the 802.11 header and the IP/ARP header. Make sense? I would have to read the tcpdump source to find out what the parenthesized MAC address means. Dave -- David Young OJC Technologies [EMAIL PROTECTED] Urbana, IL * (217) 278-3933 - This is the TCPDUMP workers list. It is archived at http://www.tcpdump.org/lists/workers/index.html To unsubscribe use mailto:[EMAIL PROTECTED]
