Wireshark-users: Re: [Wireshark-users] 12 bytes before the IP header

From: Sake Blok <sake@xxxxxxxxxx>
Date: Fri, 7 Sep 2007 00:39:07 +0200

Hi Aleksander,

> Anyone have tips on how you loose a few bytes? I get 12 bytes between  
> the Ethernet header and IP header. This means that wireshark does not  
> recognize the IP header as, and I can't use any of the wireshark's  
> advanced features.
> 
> Anyone know how to get rid of those bytes, or perhaps what they are?

I have no idea at this point in time on what they are, but James Small
has a good procedure on how to "get rid of the extra bytes". Have a look
at his mail:

http://www.wireshark.org/lists/wireshark-users/200707/msg00191.html

Hope this helps, Cheers,
 Sake