1) the "snap 0:0:f8:8:6" 2) the "(0:2:2d:91:3a:82)" of the arp reply ?
With regular wired tcp i do not get the snap mesages. The wireless connections appear to get these added ( snap ) codes.
21:13:30.820748 snap 0:0:f8:8:6 arp who-has 192.168.1.1 tell 192.168.1.68
21:14:02.829817 snap 0:0:f8:8:6 arp who-has 192.168.1.68 (Broadcast) tell 0.0.0.0
21:14:03.844022 snap 0:0:f8:8:6 arp reply 192.168.1.68 is-at 0:2:2d:91:3a:82 (0:2:2d:91:3a:82)
21:14:05.856213 snap 0:0:f8:8:6 arp who-has 192.168.1.68 (Broadcast) tell 192.168.1.68
21:19:25.016177 snap 0:0:f8:8:6 arp who-has 192.168.1.68 (Broadcast) tell 0.0.0.0
21:19:26.031710 snap 0:0:f8:8:6 arp reply 192.168.1.68 is-at 0:2:2d:91:3a:82 (0:2:2d:91:3a:82)
21:19:28.045261 snap 0:0:f8:8:6 arp who-has 192.168.1.68 (Broadcast) tell 192.168.1.68
21:19:56.010611 snap 0:0:f8:8:6 arp who-has 192.168.1.35 tell 192.168.1.68
21:19:57.009717 snap 0:0:f8:8:6 arp who-has 192.168.1.35 tell 192.168.1.68
- This is the TCPDUMP workers list. It is archived at http://www.tcpdump.org/lists/workers/index.html To unsubscribe use mailto:[EMAIL PROTECTED]
