Ethereal-users: Re: [Ethereal-users] confusion about TCP checksum calculation

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <gharris@xxxxxxxxx>
Date: Wed, 2 Jan 2002 02:42:47 -0800
On Wed, Jan 02, 2002 at 11:42:58AM +1100, Hamish Moffatt wrote:
> Oddly enough the IP header has the total length field set to 1500
> (as captured), which is wrong.

It's wrong?  Are you certain of that?  Or is the Ethernet frame, as per
the suggestion in my previous mail, a 1500-byte-plus-14-byte-Ethernet-header
frame, so that the total length is correct, but truncated to 96 bytes
due to a small snapshot length in tcpdump or Ethereal?