On Friday, Mar 26, 2004, at 08:06 US/Pacific, Aubrey McIntosh, Ph.D. wrote: > If anyone can decode these packets, or point to good tools to use on a > Win > 2000 platform, I would appreciate it. Even very basic info, such as > verifying a checksum, would be useful. > > (PING -n 10 128.83.185.40) > 7EFD20 43 E0E9 3C 1D98 70 700687848D3 C99481 C9805E4CF01A4 5EBA 7E > > 7EFD20 44 FFAE 63 FF4C 7D B37D B3 23 FE A3 FFF878 E8597E > they don't look so good to me. An IP packet should be at least 20 bytes (plus some more for an ICMP ping), not including the PPP encapsulation, and I'm pretty sure there should be a distinctive "45" for the ip version and header length. here's the dump of an IP ping (for ethernet, but...) from a cisco router (which claims 36 as the minimum ping size...) 1w2d: IP: s=172.19.192.9 (local), d=1.2.3.4 (Ethernet0/0), len 36, sending 03D6BE30: 45000024 000C0000 E..$.... 03D6BE40: FF014BAA AC13C009 01020304 080008BB ..K*,.@........; 03D6BE50: 1F94268A 00000000 31FA772C ..&.....1zw, . BillW -- http://www.piclist.com hint: To leave the PICList mailto:piclist-unsubscribe-request@mitvma.mit.edu