Got the image of 3 interesting packets by letting a modified tcpdump dump
the entire packet buffer in arp_print().
Original tcpdump output:
16:23:17.108993 P 0:60:97:ba:b4:f5 0:0:0:0:0:1 arp 1514: arp-#8192 for proto #1500 (138) hardware #17664 (36)
16:23:17.809024 P 0:60:97:ba:b4:f5 0:0:0:0:0:1 arp 1514: arp-#8192 for proto #1500 (139) hardware #17664 (36)
16:23:17.810256 P 0:60:97:ba:b4:f5 0:0:0:0:0:1 arp 1514: arp-#8377 for proto #1500 (139) hardware #17664 (36)
strings 1.bin:
espoo
b0VIM 5.7
espoo
~fvm/ctri/c_flow.c
3210#"!
strings 2.bin:
espoo
b0VIM 5.7
espoo
~fvm/ctri/c_flow.c
3210#"!
strings 3.bin:
Corresponding packet data attached (note: not suitable for tcpdump -r anymore).
-- Frank
This archive was generated by hypermail 2b29 : Tue May 15 2001 - 21:00:42 EST