Ethereal-dev: Re: [Ethereal-dev] incorrect packet length

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Richard Sharpe <rsharpe@xxxxxxxxxxxxxxxxx>
Date: Fri, 6 Dec 2002 18:44:24 -0800 (PST)
On Sat, 7 Dec 2002, J.Smith wrote:

> 
> >
> > Incorrectly?  The packet *is* 1514 bytes long - 14 bytes of Ethernet
> > header, 20 bytes of IP header, 20 bytes of TCP header, and 1460 bytes of
> > TCP payload.
> >
> > There are 1500 bytes of Ethernet *payload*; that's what tcpdump is
> > reporting.  That's the maximum amount of MAC client data according to
> > 3.1.1 "MAC frame format" in IEEE Std 802.3-2002 - but that doesn't
> > include the destination address, source address, and length/type fields
> > in the Ethernet header, nor does it include the FCS at the end.
> >
> 
> Oops. Guess I seriously screwed up here.

I would call it a small misunderstanding.

Seriously screwed up is when you decide you need to overtake a car on the 
freeway at 100 MPH and run into the back of a highway patrol car :-)

Regards
-----
Richard Sharpe, rsharpe[at]ns.aus.com, rsharpe[at]samba.org, 
sharpe[at]ethereal.com, http://www.richardsharpe.com