Ethereal-users: Re: [Ethereal-users] ARP reply before the request

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Wed, 3 Apr 2002 14:26:29 -0800
On Wed, Apr 03, 2002 at 02:34:40PM +0100, Richard Urwin wrote:
> > Besides that, the ARP requests that my computer produce have only 46 
> > bytes and the other ARP requests have only 60 bytes, which is bellow 
> > the Ethernet packet minimum length. And no packet has the Ethernet CRC.
> 
> This sounds like Capture->Start->CaptureLength is set to a low value.

Not necessarily; see my other mail.

The default in Ethereal has, for a long time, been 65535.

In the current version of Ethereal, the UI is a bit different, in that
there's a "Limit each packet to [N]" bytes item with both a checkbox to
enable the option at all, and a spin box, which is active only if the
option is enabled, to set the value of "N".  In the current version, the
default is *not* to enable that option; when not enabled, the spin box
is grayed out, and the number in the spin box is not used - instead, a
limit of 65535 is used.