Wireshark-users: [Wireshark-users] 12 bytes before the IP header
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Aleksander Veksler <veksler@xxxxxxxxxxxx>
Date: Fri, 7 Sep 2007 00:23:54 +0200
Hello people,
Anyone have tips on how you loose a few bytes? I get 12 bytes between the Ethernet header and IP header. This means that wireshark does not recognize the IP header as, and I can't use any of the wireshark's advanced features. 

Anyone know how to get rid of those bytes, or perhaps what they are?
* My card is Intel Pro/Wireless 3945ABG
* The wireless switch is D-Link DIR-635
* The problem only happens in promiscuous mode, and only to the packets not directed to my computer 
* I attach picture of a window of a sample http packet
* Please help :)


wbr, Aleksander

Attachment: packet.PNG
Description: PNG image