HOME

NAME

eth_ip_dissect - an ethernet ip protocol dissect function

SYNOPSIS

data,offset=eth_ip_dissect(pkt,offset)

DESCRIPTION

dissect ethernet ip protocol frames

                     Etherip Format
    0                   1
    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |version|       reserved        |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
                      reference RFC 3378

      ( version should be 0x03.
         an ethernet frame follows)

funtion accepts two arguments:
    pkt is a packet reference containing the whole packet to be dissect
    offset is the position inside packet to start dissection

funtion return two values:
    data is a 2 long tuple

version
reserved

    offset is the original offset plus 2