Ethereal-users: Re: [Ethereal-users] errored frames passed to wincap

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Hansang Bae <hbae@xxxxxxxxxx>
Date: Sat, 11 Mar 2006 18:58:17 -0500
On 11:32 AM 3/7/2006, Champion, Tim wrote:
>Afternoon all, has anyone been able to tweak their NIC drivers such that errored Ethernet frames (i.e. FCS error) are still passed up to wincap and Ethereal, I can see this being useful in troubleshooting situations.


Perhaps a while back, it was useful, but it's almost completely useless these days.  The reason is that no switch vendor - that I know of - supports passing errored frames when using the mirror/span function.  The last vendor that supported forwarding errored frames was Cabletron.  

Today you have to use a hardware taps to catch these errored frames.

hsb