Ethereal-users: Re: [Ethereal-users] How to Ignore the Ethernet Length Field in Ethereal or Teth

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <gharris@xxxxxxxxx>
Date: Thu, 25 Apr 2002 11:43:16 -0700
On Thu, Apr 25, 2002 at 12:39:13PM -0400, Jeff Riddel wrote:
>   I'm using Tethereal/Ethereal in conjuction with an application that 
> places RF packets in Ethernet frames.  I can see the hex frames with 
> Tethereal/Ethereal, however the frames are cut off because Ethereal 
> interprets the Ethernet length field (bytes 13&14) as the actual length 
> field and cuts off most of my data.  Is there any way to make Ethereal 
> ignore the Ethernet length field and print out all the data it receives ?

No.  Ethereal assumes people follow the IEEE specs when putting packets
onto an Ethernet, and dissects the packets as appropriate for that.

Is there any way to have your application use the Ethernet length/type
field as the IEEE specs say it should be used, i.e.  as a length field
(if < 1500) or a type field (if >= 1500)?