<proto name="llc" showname="Logical-Link Control" size="8" pos="24">
  <field name="llc.dsap" showname="DSAP: SNAP (0xaa)" size="1" pos="24" show="0xaa" value="aa"/>
  <field name="llc.dsap.ig" showname="IG Bit: Individual" size="1" pos="24" show="0" value="aa"/>
  <field name="llc.ssap" showname="SSAP: SNAP (0xaa)" size="1" pos="25" show="0xaa" value="aa"/>
  <field name="llc.ssap.cr" showname="CR Bit: Command" size="1" pos="25" show="0" value="aa"/>
  <field name="llc.control" showname="Control field: U, func=UI (0x03)" size="1" pos="26" show="0x0003" value="03">
    <field name="llc.control.u_modifier_cmd" showname="000. 00.. = Command: Unnumbered Information (0x00)" size="1" pos="26" show="0x00" value="0" unmaskedvalue="03"/>
    <field name="llc.control.ftype" showname=".... ..11 = Frame type: Unnumbered frame (0x03)" size="1" pos="26" show="0x03" value="3" unmaskedvalue="03"/>
  </field>
  <field name="llc.oui" showname="Organization Code: Encapsulated Ethernet (0x000000)" size="3" pos="27" show="0x000000" value="000000"/>
  <field name="llc.type" showname="Type: ARP (0x0806)" size="2" pos="30" show="0x0806" value="0806"/>
</proto>