Wireshark-users: Re: [Wireshark-users] Seeing Preamble in Decodes

From: "Gross, Pete" <Pete.Gross@xxxxxxxxxxx>
Date: Thu, 29 Mar 2007 13:34:58 -1000
I was not meaning the 14-byte Ethernet header.  And yes, it usually is
the hardware's job to attach the preamble as is my understanding too.
But, the equipment I am using has the capabilities to not attach a
preamble and let the user define there own. It is a nice feature for
testing purposes, but I didn't have the full specs on it and was not
defining something correctly and thus it lead to two preambles. 

Pete

-----Original Message-----
From: wireshark-users-bounces@xxxxxxxxxxxxx
[mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of Guy Harris
Sent: Thursday, March 29, 2007 11:49 AM
To: Community support list for Wireshark
Subject: Re: [Wireshark-users] Seeing Preamble in Decodes


On Mar 29, 2007, at 12:18 AM, Gross, Pete wrote:

> I was able to figure out that for some reason the hardware was  
> attaching its
> own preamble

I think it's almost always the job of the hardware to attach the  
preamble.

Now, if by "preamble" you mean, for example, the 14-byte Ethernet  
header, that's a different matter; that's not the "preamble" in  
Ethernet.  That's usually attached by the software, although if the  
adapter directly supports VLANs it might take your packet, strip off  
the Ethernet header, use the destination and source addresses of that  
header and the VLAN Ethertype to make a new 14-byte Ethernet header,  
and put the type field from the Ethernet header into a VLAN header.

_______________________________________________
Wireshark-users mailing list
Wireshark-users@xxxxxxxxxxxxx
http://www.wireshark.org/mailman/listinfo/wireshark-users

<DIV><FONT size="1">

E-mail confidentiality.
--------------------------------
This e-mail contains confidential and / or privileged information belonging to Spirent Communications plc, its affiliates and / or subsidiaries. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution and / or the taking of any action based upon reliance on the contents of this transmission is strictly forbidden. If you have received this message in error please notify the sender by return e-mail and delete it from your system. If you require assistance, please contact our IT department at helpdesk@xxxxxxxxxxx.

Spirent Communications plc,
Spirent House, Crawley Business Quarter, Fleming Way, Crawley, West Sussex, RH10 9QL, United Kingdom.
Tel No. +44 (0) 1293 767676
Fax No. +44 (0) 1293 767677

Registered in England Number 470893
Registered at Spirent House, Crawley Business Quarter, Fleming Way, Crawley, West Sussex, RH10 9QL, United Kingdom 

Or if within the US,

Spirent Communications,
26750 Agoura Road, Calabasas, CA, 91302, USA.
Tel No. 1-818-676- 2300 

</FONT></DIV>