Ethereal-users: Re: [Ethereal-users] Malformed packets

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Tue, 06 Dec 2005 00:43:30 -0800
PoWah Wong wrote:
Frame 1 (241 bytes on wire, 241 bytes captured)
    Arrival Time: Nov 30, 2005 17:06:21.999940000
    Time delta from previous packet: 0.000000000

We need to see the capture file (with the raw packet data), not the dissection, in order to see whether the problem is that there's an FCS on the packet which the dissector isn't treating as an FCS (you have to configure the dissector, with libpcap files, to do so or not to do so, except for some radiotap files where the radiotap header indicates whether an FCS is present or not).