Wireshark · Ethereal-dev: [ethereal-dev] yep, damnit... it's the linux kernel screwing with the packet dat a...

["Neulinger, Nathan R." <nneul@xxxxxxx>]

Heres the section from appletalk/aarp.c in the 2.2.13 kernel sources.

...
        }

        ea->function=ntohs(ea->function);
        
        /*
         *      Sanity check fields.
...

How annoying... Should ethereal do any handling of this, or should we
consider it being broke, and not care?

-- Nathan

------------------------------------------------------------
Nathan Neulinger                       EMail:  nneul@xxxxxxx
University of Missouri - Rolla         Phone: (573) 341-4841
Computing Services                       Fax: (573) 341-4216