I spent all today interfacing to a ethernet chip and looking at packets....

Why the hell doesn't etherreal allow you to load a single packet as a binary dump?!

The text2pcap software is complete and utter junk that wouldn't take any input (binary->text using od.exe), even as specified in it's manpage.

I ended up having to write a small utility to dump the binary output as text that it liked, but I find it ever so amusing that I have to drop to a command line to run a batch file to get the packet into a format that it'll understand.

Most frustrating day ever. I still don't get how ARP doesn't end up with it's knickers in a twist when DHCP gets involved. (release address and allocate a new one).

I need a beer.