Wireshark · Wireshark-dev: Re: [Wireshark-dev] Dissector for User Protocol

[Guy Harris <guy@xxxxxxxxxxxx>]

On Nov 7, 2008, at 6:25 AM, Lukas Haas wrote:

> maybe it helps to give you my ethernet frame format:
> 6 bytes dest. address
> 6 bytes source address
> 2 bytes length
> 19 bytes data

19 bytes data immediately after the Ethernet header?

No 802.2 header?

How does the receiving machine determine that the packet is a packet  
for your protocol rather than a packet for some other protocol?