Ethereal-users: [Ethereal-users] Ethernet frame length
Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.
From: "Caprice" <mmmgrrrl@xxxxxxxxxxx>
Date: Mon, 11 Aug 2003 18:11:51 -0700
Hello,
Below is a ethereal capture of my dsl session, interface netgear fa511 nic under win98se2. The pppoe client
is enternet. Why is ethereal reporting 1516 bytes instead of 1514? Somewhere between the PPP-over-Ethernet
session payload length of 1494 PLUS said header of 6 bytes (1500) PLUS 14 bytes of the Ethernet header (1514),
1516 bytes appear. Thanks...
Frame 38 (1516 bytes on wire, 1516 bytes captured)
Arrival Time: Aug 5, 2003 18:22:32.809293000
Time delta from previous packet: 0.017038000 seconds
Time relative to first packet: 22.275957000 seconds
Frame Number: 38
Packet Length: 1516 bytes
Capture Length: 1516 bytes
Ethernet II, Src: 00:10:67:00:97:5b, Dst: 00:10:7e:68:2a:85
Destination: 00:10:7e:68:2a:85 (Ambicom_68:2a:85)
Source: 00:10:67:00:97:5b (RedbackN_00:97:5b)
Type: PPPoE Session (0x8864)
PPP-over-Ethernet Session
Version: 1
Type: 1
Code: Session Data
Session ID: bb2b
Payload Length: 1494
Point-to-Point Protocol
Protocol: IP (0x0021)
Internet Protocol, Src Addr: 208.45.133.23 (208.45.133.23), Dst Addr: 64.172.107.8 (64.172.107.8)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1492
Identification: 0xe133 (57651)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 49
Protocol: TCP (0x06)
Header checksum: 0x61f7 (correct)
Source: 208.45.133.23 (208.45.133.23)
Destination: 64.172.107.8 (64.172.107.8)
Transmission Control Protocol, Src Port: 80 (80), Dst Port: 1335 (1335), Seq: 1253425285, Ack: 295498161, Len: 1452
Source port: 80 (80)
Destination port: 1335 (1335)
Sequence number: 1253425285
Next sequence number: 1253426737
Acknowledgement number: 295498161
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 6432
Checksum: 0x4ae1 (correct)
Hypertext Transfer Protocol
Data (1452 bytes)
0000 00 10 7a 68 1c 81 00 10 67 00 97 5b 88 64 11 00 ..zh....g..[.d..
0010 bb 2b 05 d6 00 21 45 00 05 d4 e1 33 40 00 31 06 .+...!E....3@.1.
0020 61 f7 d0 2d 85 17 40 ac 6b 08 00 50 05 37 4a b5 a..-..@.k..P.7J.
0030 c0 85 11 9c f1 b1 50 10 19 20 4a e1 00 00 64 20 ......P.. J...d
0040 7b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 { font-weight: b
0050 6f 6c 64 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 old; font-size:
0060 27 2b 6d 65 78 42 64 79 53 6d 53 7a 2b 27 70 74 '+mexBdySmSz+'pt
0070 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 61 ; font-family: a
0080 72 69 61 6c 3b 20 7d 27 20 2b 0a 09 09 09 27 2e rial; }' +....'.
0090 73 6d 61 6c 6c 56 65 72 20 7b 20 66 6f 6e 74 2d smallVer { font-
00a0 73 69 7a 65 3a 20 27 2b 6d 65 78 42 64 79 53 6d size: '+mexBdySm
00b0 53 7a 2b 27 70 74 3b 20 66 6f 6e 74 2d 66 61 6d Sz+'pt; font-fam
00c0 69 6c 79 3a 20 76 65 72 64 61 6e 61 20 7d 27 20 ily: verdana }'
00d0 2b 0a 09 09 09 27 2e 74 76 4c 69 6e 6b 73 20 7b +....'.tvLinks {
00e0 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 27 2b 6d 65 font-size: '+me
00f0 78 42 64 79 53 6d 53 7a 2b 27 70 74 3b 20 66 6f xBdySmSz+'pt; fo
0100 6e 74 2d 66 61 6d 69 6c 79 3a 20 61 72 69 61 6c nt-family: arial
0110 3b 20 63 6f 6c 6f 72 3a 20 42 6c 61 63 6b 3b 20 ; color: Black;
0120 7d 27 20 2b 0a 09 09 09 27 2e 74 76 43 68 61 6e }' +....'.tvChan
0130 54 79 70 65 20 7b 20 66 6f 6e 74 2d 73 69 7a 65 Type { font-size
0140 3a 20 27 2b 6d 65 78 42 64 79 53 6d 53 7a 2b 27 : '+mexBdySmSz+'
0150 70 74 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a pt; font-family:
0160 20 61 72 69 61 6c 3b 20 63 6f 6c 6f 72 3a 20 23 arial; color: #
0170 36 36 36 36 36 36 3b 20 7d 27 20 2b 0a 09 09 09 666666; }' +....
0180 27 2e 70 73 74 65 72 6d 73 20 7b 20 66 6f 6e 74 '.psterms { font
0190 2d 73 69 7a 65 3a 20 39 2e 35 70 74 3b 20 66 6f -size: 9.5pt; fo
01a0 6e 74 2d 66 61 6d 69 6c 79 3a 20 61 72 69 61 6c nt-family: arial
01b0 20 7d 27 20 2b 0a 09 09 09 27 2e 70 73 73 6d 61 }' +....'.pssma
01c0 6c 6c 20 7b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 ll { font-size:
01d0 38 70 74 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 8pt; font-family
01e0 3a 20 61 72 69 61 6c 3b 6c 65 74 74 65 72 2d 73 : arial;letter-s
01f0 70 61 63 69 6e 67 3a 20 2d 31 70 78 3b 20 7d 27 pacing: -1px; }'
0200 20 2b 0a 09 09 09 27 2e 77 65 6c 63 6f 6d 65 20 +....'.welcome
0210 7b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 { font-size: 12p
0220 74 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 t; font-family:
0230 61 72 69 61 6c 3b 20 63 6f 6c 6f 72 3a 20 30 30 arial; color: 00
0240 30 30 39 39 20 7d 27 20 2b 0a 09 09 09 27 2e 6c 0099 }' +....'.l
0250 61 72 67 65 20 7b 20 66 6f 6e 74 2d 73 69 7a 65 arge { font-size
0260 3a 20 31 32 70 74 3b 20 7d 27 20 2b 0a 09 09 09 : 12pt; }' +....
0270 27 2e 6d 61 72 67 69 6e 20 7b 20 6d 61 72 67 69 '.margin { margi
0280 6e 2d 74 6f 70 3a 20 32 70 78 3b 20 6d 61 72 67 n-top: 2px; marg
0290 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 70 78 3b 20 in-bottom: 2px;
02a0 7d 27 20 2b 0a 09 09 09 27 2e 65 78 63 20 7b 20 }' +....'.exc {
02b0 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 padding-bottom:
02c0 33 3b 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 3; padding-left:
02d0 09 20 33 3b 20 70 61 64 64 69 6e 67 2d 72 69 67 . 3; padding-rig
02e0 68 74 3a 20 33 3b 20 70 61 64 64 69 6e 67 2d 74 ht: 3; padding-t
02f0 6f 70 3a 20 35 3b 20 7d 27 20 2b 0a 09 09 09 27 op: 5; }' +....'
0300 2e 61 72 69 61 6c 20 7b 20 66 6f 6e 74 2d 66 61 .arial { font-fa
0310 6d 69 6c 79 3a 20 61 72 69 61 6c 20 7d 27 20 2b mily: arial }' +
0320 0a 09 09 09 27 2e 76 65 72 64 61 6e 61 73 6d 61 ....'.verdanasma
0330 6c 6c 20 7b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 ll { font-size:
0340 35 70 74 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 5pt; font-family
0350 3a 20 76 65 72 64 61 6e 61 3b 20 7d 27 20 2b 0a : verdana; }' +.
0360 09 09 09 27 2e 76 65 72 64 61 6e 61 73 6d 61 6c ...'.verdanasmal
0370 6c 62 6f 6c 64 20 7b 20 66 6f 6e 74 2d 77 65 69 lbold { font-wei
0380 67 68 74 3a 20 62 6f 6c 64 3b 20 66 6f 6e 74 2d ght: bold; font-
0390 73 69 7a 65 3a 20 35 70 74 3b 20 66 6f 6e 74 2d size: 5pt; font-
03a0 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 3b family: verdana;
03b0 20 7d 27 20 2b 0a 09 09 09 27 2e 6d 65 78 48 64 }' +....'.mexHd
03c0 72 54 78 74 20 7b 20 66 6f 6e 74 2d 77 65 69 67 rTxt { font-weig
03d0 68 74 3a 20 62 6f 6c 64 3b 20 66 6f 6e 74 2d 66 ht: bold; font-f
03e0 61 6d 69 6c 79 3a 20 27 2b 6d 65 78 48 64 72 46 amily: '+mexHdrF
03f0 6e 74 46 61 63 65 2b 27 3b 20 66 6f 6e 74 2d 73 ntFace+'; font-s
0400 69 7a 65 3a 20 27 2b 6d 65 78 48 64 72 46 6e 74 ize: '+mexHdrFnt
0410 53 7a 2b 27 70 74 3b 20 63 6f 6c 6f 72 3a 20 27 Sz+'pt; color: '
0420 2b 6d 65 78 48 64 72 46 6e 74 43 6c 72 2b 27 20 +mexHdrFntClr+'
0430 7d 27 20 2b 0a 09 09 09 27 2e 6d 65 78 48 64 72 }' +....'.mexHdr
0440 54 78 74 53 6d 20 7b 20 66 6f 6e 74 2d 77 65 69 TxtSm { font-wei
0450 67 68 74 3a 20 62 6f 6c 64 3b 20 66 6f 6e 74 2d ght: bold; font-
0460 66 61 6d 69 6c 79 3a 20 27 2b 6d 65 78 48 64 72 family: '+mexHdr
0470 46 6e 74 46 61 63 65 2b 27 3b 20 66 6f 6e 74 2d FntFace+'; font-
0480 73 69 7a 65 3a 20 27 2b 6d 65 78 42 64 79 53 6d size: '+mexBdySm
0490 53 7a 2b 27 70 74 3b 20 63 6f 6c 6f 72 3a 20 27 Sz+'pt; color: '
04a0 2b 6d 65 78 48 64 72 46 6e 74 43 6c 72 2b 27 20 +mexHdrFntClr+'
04b0 7d 27 20 2b 0a 09 09 09 27 2e 6d 65 78 48 64 72 }' +....'.mexHdr
04c0 54 78 74 4e 62 6f 6c 64 20 7b 20 66 6f 6e 74 2d TxtNbold { font-
04d0 66 61 6d 69 6c 79 3a 20 27 2b 6d 65 78 48 64 72 family: '+mexHdr
04e0 46 6e 74 46 61 63 65 2b 27 3b 20 66 6f 6e 74 2d FntFace+'; font-
04f0 73 69 7a 65 3a 20 27 2b 6d 65 78 48 64 72 46 6e size: '+mexHdrFn
0500 74 53 7a 2b 27 70 74 3b 20 63 6f 6c 6f 72 3a 20 tSz+'pt; color:
0510 27 2b 6d 65 78 48 64 72 46 6e 74 43 6c 72 2b 27 '+mexHdrFntClr+'
0520 20 7d 27 20 2b 0a 09 09 09 27 74 72 2e 73 70 6f }' +....'tr.spo
0530 72 74 73 20 7b 20 66 6f 6e 74 2d 77 65 69 67 68 rts { font-weigh
0540 74 3a 20 62 6f 6c 64 3b 20 66 6f 6e 74 2d 73 69 t: bold; font-si
0550 7a 65 3a 20 38 70 74 3b 20 66 6f 6e 74 2d 66 61 ze: 8pt; font-fa
0560 6d 69 6c 79 3a 20 61 72 69 61 6c 3b 20 7d 27 20 mily: arial; }'
0570 2b 0a 09 09 09 27 74 72 2e 6d 65 78 48 64 72 20 +....'tr.mexHdr
0580 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c { background-col
0590 6f 72 3a 20 27 2b 6d 65 78 48 64 72 42 67 2b 27 or: '+mexHdrBg+'
05a0 3b 7d 27 20 2b 0a 09 09 09 27 2e 6d 65 78 48 64 ;}' +....'.mexHd
05b0 72 54 78 74 53 75 62 20 7b 20 66 6f 6e 74 2d 77 rTxtSub { font-w
05c0 65 69 67 68 74 3a 20 62 6f 6c 64 3b 20 66 6f 6e eight: bold; fon
05d0 74 2d 66 61 6d 69 6c 79 3a 20 27 2b 6d 65 78 48 t-family: '+mexH
05e0 64 72 53 75 62 46 6e 74 46 61 74 6d drSubFntFatm
- Prev by Date: [Ethereal-users] Need help with WEP
- Next by Date: [Ethereal-users] Compiling with MingW
- Previous by thread: [Ethereal-users] Need help with WEP
- Next by thread: [Ethereal-users] Ethernet frame length
- Index(es):
