["Rob Moore" <rob.moore@xxxxxxxxxxxxx>]

I am running Ethereal on Gentoo linuix and capturing Ethernet packets sent from my Cisco CallManager 4.2

 

I notice a number of frames that are short-frames….indicating 1514 bytes on the wire, and 1500 bytes captured.

 

What might cause only 1500 bytes to be captured?  My eth0 interfaces have MTU 1500.

 

I am assuming I have 12 (I think) bytes of header….but the header appears to be captured.  When I look at the captured information, It appears that I am missing payload!

 

Cisco CallManager runs under a Windows OS (2000 I think? Will need to check)….perhaps they have the MTU hardcoded in the registry.

 

Any thoughts would be appreciated.

 

 

 

Rob Moore

 

Systems Engineer                                 200 Brook Drive

VisionOSS Limited                                Green Park

Tel   +44 (0) 118 949 7000                     Reading

Fax  +44 (0) 118 949 7145                     RG2 6UB

Mob +44 (0) 7870 395901                      United Kingdom

 

E-Mail:   Rob.Moore@xxxxxxxxxxxxx

Web:   www.visionoss.com 

 

VisionOSS

VOIP Management Excellence

 

_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users