tcpdump ether data

Andrea Arcangeli (andrea@e-mind.com)
Sat, 31 Oct 1998 15:07:22 +0100 (CET)

What does it mean this line in this tcpdump trace? After this line it
seems that the router of my ISP became crazy and shutdown all connections.
The ether address of the router and of all dialup connection is
0:10:7b:a8:6f:41. How can understand how is 1:0:c:cc:cc:cc?

12:44:13.583868 0:10:7b:a8:6f:41 > 1:0:c:cc:cc:cc sap aa ui/C len=293
3500 0100 0963 3336 3430 0002 0011 0000
0001 0101 cc00 04c3 df8c 0100 0300 0f45
7468 6572 6e65 7430 2f30 00

The CISCO router random lock every 6/7 hours and I think this packet has
something to do with the lock (eventually it' s only a reaction and not
the cause).

I am going to look at tcpdump sources to understand this data. And the
bytes in the dump are the IP and TCP data patcket? (so can I start
browsing from rfc791/793?).

I am off the list so please eventually reply directly to my email.

Andrea Arcangeli

-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to majordomo@vger.rutgers.edu