ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-users: Re: [Wireshark-users] 12 bytes before the IP header

From: Sake Blok <sake@xxxxxxxxxx>
Date: Fri, 7 Sep 2007 00:39:07 +0200
Hi Aleksander,

> Anyone have tips on how you loose a few bytes? I get 12 bytes between  
> the Ethernet header and IP header. This means that wireshark does not  
> recognize the IP header as, and I can't use any of the wireshark's  
> advanced features.
> 
> Anyone know how to get rid of those bytes, or perhaps what they are?

I have no idea at this point in time on what they are, but James Small
has a good procedure on how to "get rid of the extra bytes". Have a look
at his mail:

http://www.wireshark.org/lists/wireshark-users/200707/msg00191.html

Hope this helps, Cheers,
 Sake