Ethereal-dev: Re: [ethereal-dev] Ethereal showing extra data on the end of packets

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Richard Sharpe <sharpe@xxxxxxxxxx>
Date: Sat, 10 Jul 1999 09:03:59 +0900
At 10:02 AM 7/9/99 -0500, Gilbert Ramirez <gram@xxxxxxxxxx> wrote:
>On Fri, Jul 09, 1999 at 09:49:40AM -0500, Timothy Babin wrote:
>> 
>> 
>> I am trying to debug a problem with ethereal showing
>> extra information on the end of packets.
>> 
>> I am capturing ICMP packets with both ethereal and tcpdump.
>> tcpdump correctly shows me the shortened packets, but
>> ethereal shows me extra garbage on the end.
>> 
>> Any ideas?

I have seen this before as well.

>Can you post a small sample trace so others can load it into
>ethereal?
>
>What OS and NIC are you using? It is possible that you are seeing
>a link-layer checksum on the end.

I think that it is the FCS. I have seen it on Linux 2.0.35 or there abouts
with a Xircom PS2CE

>--gilbert
>
>

Regards
-------
Richard Sharpe, sharpe@xxxxxxxxxx, NS Computer Software and Services P/L,
Samba (Team member www.samba.org), Ethereal (Team member www.zing.org)
Co-author, SAMS Teach Yourself Samba in 24 Hours