Ethereal-users: RE: [Ethereal-users] MAC Cheksum

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Eckert, Christopher" <CEckert@xxxxxxxxxxxxxx>
Date: Tue, 28 May 2002 15:13:43 -0400
I believe, Someone please check me on this, that the 4 Byte Checksum is
stripped by the NIC before being passed up to the Stack, and thus, before
being passed to WinPcap. I don't know if you can see this in any Analyzer
but if you can it would require Promiscuous mode. I am also not sure of the
effects of Switched networks on this. It may not get passed by Span/Monitor
where it would be seen on a hub


>MAC frames include a field Checksum (4 Bytes), and 
>I can't find how force Ethereal to check this checksum ?
>It will be nice if ethreal display, MAC Checksum (correct)
>for each frame.  What do you suggest ?


------------------------------------------------------------------------------
This e-mail transmission may contain information that is proprietary, privileged and/or confidential and is intended exclusively for the person(s) to whom it is addressed. Any use, copying, retention or disclosure by any person other than the intended recipient or the intended recipient's designees is strictly prohibited. If you have received this message in error, please notify the sender immediately by return e-mail and delete all copies.


==============================================================================