Wireshark · Ethereal-users: Re: [Ethereal-users] How to Ignore the Ethernet Length Field in Ethereal or Tethereal

[Jeff Riddel <jriddel@xxxxxxxxx>]

Thanks for the info,

  That's what I kind of figured, my application is not really creating Ethernet
frames its just replicating the bit pattern from RF frames and sending them
out the Ethernet interface (what Ethereal decodes as the Source and Destination
MAC are not actual MAC addresses either).  The interesting thing is that
Sniffer Pro will read in the entire bit pattern, I was just looking for a
way to do it in a UNIX environment.

Guy Harris wrote:
> On Thu, Apr 25, 2002 at 12:39:13PM -0400, Jeff Riddel wrote:
> >   I'm using Tethereal/Ethereal in conjuction with an application that 
> > places RF packets in Ethernet frames.  I can see the hex frames with 
> > Tethereal/Ethereal, however the frames are cut off because Ethereal 
> > interprets the Ethernet length field (bytes 13&14) as the actual length 
> > field and cuts off most of my data.  Is there any way to make Ethereal 
> > ignore the Ethernet length field and print out all the data it receives ?
> >     
>
> No.  Ethereal assumes people follow the IEEE specs when putting packets
> onto an Ethernet, and dissects the packets as appropriate for that.
>
> Is there any way to have your application use the Ethernet length/type
> field as the IEEE specs say it should be used, i.e.  as a length field
> (if < 1500) or a type field (if >= 1500)?
>
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>
>