10 May
2017
10 May
'17
12:24 p.m.
Perhaps then I didn't glean that data...but HOW
does one 'decode' that
MAC then?
Meaning, how do I see SRC, DST protocol number, etc.?
(this might be helpful looking through kernel-mod ipt)
That MAC is just a hexdump of the IP header so you extract the bytes
you want and convert them to decimal.
It should have been only 20 bytes but it is much longer, probably someone
misunderstood the length field somewhere.
Rob