Ethereal-users: [Ethereal-users] Question regarding oversized frames

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Grant Mills" <gmills@xxxxxxxx>
Date: Tue, 5 Sep 2006 13:30:34 -0700
-------------------
The Ethereal project is being continued at a new site.  Please go to
http://www.wireshark.org and subscribe to wireshark-users@xxxxxxxxxxxxx.
Don't forget to unsubscribe from this list at
http://www.ethereal.com/mailman/listinfo/ethereal-users
-------------------

I'm trying to view some packets generated by a SmartBits.

I generate a 1514 byte frame on the Smart Bits.  This goes out and
ethereal displays it.  The device on the other end, loops it back
(Swaps Src & Dest MAC & IP Addrs.)  The SmartBits capture tools
receives and displays the frame.  Ethereal doesn't.  There is one
slight modification to frame.  Due to a hardware limitation on the
DUT, the return frame is now 1516 bytes (not including CRC.)  We're
forced to use 4 byte alignment on our transmit.  So the returned frame
is now over sized.  I have witnessed v0.10.7 of Ethereal displaying
frames of this size, but 0.10.10 does not.  I tried WireShark 0.99.3
and it doesn't display the over sized frames either.

I'm about to go research pcap/tcpdump to see if the problem lies there.

I really need to either configure Ethereal/WireShark/Pcap to display
these over sized frames or find a tool that does.  Any help will be
appreciated.  Thanks in advance.


--
Grant Mills
gmills@xxxxxxxx
_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users