Ethereal-users: Re: [Ethereal-users] minimum frame size

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Tue, 20 Jan 2004 16:07:51 -0800

On Jan 20, 2004, at 1:07 PM, john g wrote:


but i have frames captured (on ethereal) that show up
as 54 bytes as well. (it was a Ethernet II frame)

can someone explain how that is possible ?
If the frame was sent by the machine running Ethereal, it was supplied to libpcap by the networking code *before* it was transmitted, and therefore *before* it was padded and *before* it had a CRC added. (Ethernet devices generally do not receive packets that they transmit, so it can't be supplied to the networking code after it's transmitted.)