On Wed, Jun 05, 2002 at 04:19:10PM -0700, Guy Harris wrote: :> if the type/length field is <= 1500, it's a length field, and :> the link-layer header is probably followed by an IEEE 802.2 LLC :> header; :> :> if the type/length field is > 1500, it's a type field - a value :> of 0x0800 means "IPv4".
Hi there, If my interpretation of section 3.2.6 (Length/Type field) of 802.3-2000.pdf is correct, I believe the values between (1500..1536) are undefined. The type field actually starts at 1536. Though I think most people just pick 1500 as the lower boundary for the type field -- which is not what the spec says. Cheers, -Narin - This is the TCPDUMP workers list. It is archived at http://www.tcpdump.org/lists/workers/index.html To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
