Wireshark · Ethereal-users: [Ethereal-users] ethernet frame length

[jairo.morales01@xxxxxxxxxx]

Some days ago I wrote in this list a message asking about the ethernet frame 
length because I was capturing a 42 bytes ethernet frame instead a 64 bytes one 
(all you know that 64 is the standard size). A person answered me and wrote:



"That's because the way frames being sent by the machine running Ethereal
(or any other capture program) are "captured" not by being read from the
network (most if not all Ethernet interfaces don't receive packets that
they send) but by being internally supplied to the mechanism being used
for capture.

That's done *before* the packet is padded out to the minimum 64-byte
length for transmission on Ethernet, so those packets aren't padded; that
padding is what Ethereal reports as the Trailer"

So I captured the packet in other PC, different to the PC which sent the 
packets, then I could capture a 62 bytes packet, but, why it is still shorter 
than the 64 bytes standard size?


------------------------------------------
Correo Via Web, otro servicio USC
Universidad Santiago de Cali 2003
http://www.usc.edu.co