# DF-3290 / DF-3291 run.log -- stock kernel X86_64_GENERIC #0
# injected frames (harness): step 22 = GANN ttl=0; step 21 = GANN IE len=0 + markers
# victim re-broadcasts captured at ic_raw_xmit (kern.fwm_txlog):
tx[28] fc0=d0 len= 43:d0000000ffffffffffff0200000000f20200000000f2b0000d027d0f0001ff020000020040010000001027
tx[29] fc0=d0 len= 43:d0000000ffffffffffff0200000000f20200000000f260010d027d0f000eb1b3b4b5b6b7b8b9b9b9b9bebd

# decode tx[28] (DF-3291): body 0d 02 | GANN IE 7d 0f: flags=00 hop=01 TTL=ff(255!)
#   addr=02:00:00:02:00:40 seq=00000001 interval=0x2710
#   -> input frame had TTL=0; propagated TTL = 0-1 wrapped to 255
# decode tx[29] (DF-3290): body 0d 02 | GANN IE 7d 0f: flags=00 hop=0e(=0x0d+1)
#   TTL=b1(=0xb2-1) addr=b3:b4:b5:b6:b7:b8 seq=b9b9b9b9 interval=bebd
#   -> the input IE declared len=0; every field was read from bytes AFTER the IE