Ethereal-dev: Re: [Ethereal-dev] seeing lots of "Short Frame"s with 0.9.16 when reading 'snoop

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Tue, 4 Nov 2003 14:17:42 -0800

On Nov 4, 2003, at 1:35 PM, Jeff Morriss wrote:
With 0.9.16 (and CVS tip as of hour ago or so), I'm seeing a lot of "Short Frame"s when analyzing files captured with Solaris 8's 'snoop'.
Great. Sun somehow decided to stuff 6 bytes of padding into the frame; 8-byte alignment, I guess. We were deciding those were Shomiti Surveyor captures, and therefore assuming the packet data included an FCS.
I've changed the snoop-reading code to assume that a capture isn't a Shomiti/Finisar Surveyor capture unless it has enough padding to hold a Surveyor trailer (16 bytes - hopefully Sun doesn't put in *that* much padding).