Wireshark-users: Re: [Wireshark-users] 12 bytes before the IP header
From: Sake Blok <[email protected]>
Date: Fri, 7 Sep 2007 00:39:07 +0200
Hi Aleksander,

> Anyone have tips on how you loose a few bytes? I get 12 bytes between  
> the Ethernet header and IP header. This means that wireshark does not  
> recognize the IP header as, and I can't use any of the wireshark's  
> advanced features.
> Anyone know how to get rid of those bytes, or perhaps what they are?

I have no idea at this point in time on what they are, but James Small
has a good procedure on how to "get rid of the extra bytes". Have a look
at his mail:


Hope this helps, Cheers,