It is simply a straight hexdump of a layer 2 frame, i.e. ethernet. It is Ethernet_II and from the protocol id 0800 you can be sure it indeed is IP. IP starts at offset 14 and is (as beeing IPv4) easily detetcted with the first nibble of a byte beeing 4 (and in most cases the whole byte beeing 45 due to normal [i.e. optionless] IP headers having 5 longwords). The rest can be analyzed if you have RFC 791, 792 handy or with a nice little program that Phillip Vandry <vandry@Mlink.NET> posted to this list a while ago (<A HREF="http://www.mlink.net/~vandry/hex2ppp.html">http://www.mlink.net/~vandry/hex2ppp.html</A>): beck@micky:~ > hex2ppp/hex2ppp [0000]: 00 C0 7B 63 B1 1E 00 80 C8 86 26 F6 08 00 45 00 [0010]: 00 3C E9 05 00 00 1F 01 E5 BF C0 A8 64 66 A5 E3 [0020]: 02 0A 08 00 25 5C 01 00 27 00 61 62 63 64 65 66 [0030]: 67 68 69 6A 6B 6C 6D 6E 6F 70 71 72 00c07b63b11e0080c88626f60800 IPv4 <len=3c> <id=e905> <ttl 31> ICMP 192.168.100.102 --> 165.227.2.10 EchoRequest <code=0> <sum=255c> <id=256> <seq=9984> 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 ^D Yeah, normal ICMP echo request (i.e. ping) from 192.168.100.102 to 165.227.2.10 and likely to cause a dialout. Andre. -- Kanther-Line: PGP SSH IDEA MD5 GOST RIPE-MD160 3DES RSA FEAL32 RC4 +-o-+--------------------------------------------------------+-o-+ | o | \\\- Brain Inside -/// | o | | o | ^^^^^^^^^^^^^^ | o | | o | Andre' Beck (ABPSoft) beck@ibh-dd.de XLink PoP Dresden | o | +-o-+--------------------------------------------------------+-o-+ ++ Ascend Users Mailing List ++ To unsubscribe: send unsubscribe to ascend-users-request@bungi.com To get FAQ'd: <<A HREF="http://www.nealis.net/ascend/faq">http://www.nealis.net/ascend/faq</A>> </PRE> <!--X-MsgBody-End--> <!--X-Follow-Ups--> <HR> <STRONG>Follow-Ups</STRONG>: <UL> <LI><STRONG><A HREF="msg10597.html">Re: (ASCEND) wddi Debug Data Format</A></STRONG></LI> <UL> <LI><EM>From</EM>: Larry Young <larry@zedak.com></LI> </UL> </UL> <!--X-Follow-Ups-End--> <!--X-References--> <STRONG>References</STRONG>: <UL> <LI><STRONG><A HREF="msg10537.html">(ASCEND) wddi Debug Data Format</A></STRONG></LI> <UL> <LI><EM>From</EM>: "Rylan Luke" <rylan@rymar.com></LI> </UL> </UL> <!--X-References-End--> <!--X-BotPNI--> <HR> <UL> <LI>Prev by Date: <STRONG><A HREF="msg10597.html">Re: (ASCEND) wddi Debug Data Format</A></STRONG> </LI> <LI>Next by Date: <STRONG><A HREF="msg10594.html">(ASCEND) Pipeline 50 Config Question</A></STRONG> </LI> <LI>Prev by thread: <STRONG><A HREF="msg10540.html">Re: (ASCEND) wddi Debug Data Format</A></STRONG> </LI> <LI>Next by thread: <STRONG><A HREF="msg10597.html">Re: (ASCEND) wddi Debug Data Format</A></STRONG> </LI> <LI>Index(es): <UL> <LI><A HREF="maillist.html#10596"><STRONG>Main</STRONG></A></LI> <LI><A HREF="thrd234.html#10596"><STRONG>Thread</STRONG></A></LI> </UL> </LI> </UL> <!--X-BotPNI-End--> <!--X-User-Footer--> <!--X-User-Footer-End--> </BODY> </HTML>