Perhaps then I didn't glean that data...but HOW does one 'decode' that MAC then? Meaning, how do I see SRC, DST protocol number, etc.? (this might be helpful looking through kernel-mod ipt)

That MAC is just a hexdump of the IP header so you extract the bytes you want and convert them to decimal. It should have been only 20 bytes but it is much longer, probably someone misunderstood the length field somewhere.

Rob