This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

question on ARP

0

Can someone help me, wht this question mean? and how can i get the answer? How many bytes from the very beginning of the Ethernet frame does the ARP opcode field begin?

asked 14 Feb '14, 22:15

popo88's gravatar image

popo88
1●1●1●1
accept rate: 0%

1

I found the answer to that question here

http://bit.ly/1c91E9t

(15 Feb '14, 03:14) Kurt Knochner ♦

One Answer:

0

Should be easy enough:

  1. Run Wireshark
  2. capture on your network card
  3. wait until you see an ARP packet
  4. expand the ARP header decode of that packet
  5. look for the opcode field
  6. determine the offset

answered 15 Feb '14, 01:41

Jasper's gravatar image

Jasper ♦♦
23.8k●5●51●284
accept rate: 18%