<< | Thread Index | >> ]    [ << | Date Index | >> ]

Subject: ethereal and cipe for windows
From: TSchaefer,AT,t-online,DOT,de (Thomas Schaefer)
Date: Thu, 14 Feb 2002 10:13:38 +0100

Hi,

I capture on the tunnel-interface, not the real interface. (in linux 
cipcb0, 
on windows \Device\Packet_CIPE2)
The real interface of course shows only the encapsulated/encrypted 
data.  
But I need to analyse the "normal" packets inside the tunnel.

Here two examples frame 1 into the tunnel and frame 2 out of tunnel.

Frame 1 (83 on wire, 83 captured)
    Arrival Time: Feb 14, 2002 09:42:40.760154000
    Time delta from previous packet: 0.000000000 seconds
    Time relative to first packet: 0.000000000 seconds
    Frame Number: 1
    Packet Length: 83 bytes
    Capture Length: 83 bytes
Ethernet II
    Destination: 08:00:58:00:00:02 (???_00:00:02)
    Source: 08:00:58:00:00:01 (???_00:00:01)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 10.0.1.1 (10.0.1.1), Dst Addr: 
192.1.12.120 (192.1.12.120) 
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 69
    Identification: 0x4e69
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x14c5 (correct)
    Source: 10.0.1.1 (10.0.1.1)
    Destination: 192.1.12.120 (192.1.12.120)
.....
Frame 2 (149 on wire, 56183 captured)
    Arrival Time: Feb 14, 2002 09:42:40.774242000
    Time delta from previous packet: 0.014088000 seconds
    Time relative to first packet: 0.014088000 seconds
    Frame Number: 2
    Packet Length: 149 bytes
    Capture Length: 56183 bytes
Ethernet II
    Destination: 08:00:58:00:00:01 (???_00:00:01)
    Source: 08:00:58:00:00:02 (???_00:00:02)
    Type: IP (0x0800)
Internet Protocol
    Header length: 8 bytes (bogus, must be at least 20)

Thank You,

Regards,
Thomas Schäfer





<< | Thread Index | >> ]    [ << | Date Index | >> ]