nickagian
Member level 4
- Joined
- Mar 19, 2009
- Messages
- 71
- Helped
- 2
- Reputation
- 4
- Reaction score
- 2
- Trophy points
- 1,288
- Location
- Zurich, Switzerland
- Activity points
- 2,001
Could anyone help me decipher the following ARP message?
I get the following bytes: (I can see them directly at the PHY level)
55 55 55 55 55 55 55 D5 FF FF FF FF FF FF 00 1B 21 A8 5B B5 08 06 00 01 08 00 06 04 00 01 00 1B 21 A8 5B B5 C0 A8 00 01 00 00 00 00 00 00 C0 A8 00 02 (*)00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00(*) 52 9A 11 85
I mean, I can understand everything until the first (*). We have the Ethernet preamble, the ethernet header and then comes the ARP content, which should end with the IP Address of the destination (C0 A8 00 02 -> 192.168.0.2). But then what comes next? Why are all those "00" present there? I can see that with them there the number of bytes included in the ethernet packet (without preamble and crc) are 60. And I cannot see these bytes transmitted from Wireshark. Have they been added there from the PHY? To meet maybe some minimum byte length requirement?
Does anyone have any idea?
Nikos
I get the following bytes: (I can see them directly at the PHY level)
55 55 55 55 55 55 55 D5 FF FF FF FF FF FF 00 1B 21 A8 5B B5 08 06 00 01 08 00 06 04 00 01 00 1B 21 A8 5B B5 C0 A8 00 01 00 00 00 00 00 00 C0 A8 00 02 (*)00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00(*) 52 9A 11 85
I mean, I can understand everything until the first (*). We have the Ethernet preamble, the ethernet header and then comes the ARP content, which should end with the IP Address of the destination (C0 A8 00 02 -> 192.168.0.2). But then what comes next? Why are all those "00" present there? I can see that with them there the number of bytes included in the ethernet packet (without preamble and crc) are 60. And I cannot see these bytes transmitted from Wireshark. Have they been added there from the PHY? To meet maybe some minimum byte length requirement?
Does anyone have any idea?
Nikos
Last edited: