Ethereal-users: Re: [Ethereal-users] interpret a hex dump

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Brad Hards <bhards@xxxxxxxxxxxxxx>
Date: Sat, 21 Feb 2004 21:49:33 +1100
On Sat, 21 Feb 2004 21:15 pm, john g wrote:
> please point me to a doc or link that explains how to
> interpret a hex dump (typically generated from
> tcpdump/windump) , ie what respective bytes represent.
Typically you get the networking RFCs (from the IETF web site - 
http://www.ietf.org/rfc.html) and with some knowledge of how networking 
layers interrelate, you figure it out.

Or you read the capture file into Ethereal and use the GUI.

Your question is significantly underspecified. What are you actually trying to 
do?

Brad

Attachment: pgpcYkEhdvkRi.pgp
Description: signature