Abodunrin, Akeem G wrote:

> Intel E1G44ET NICs would drop this kind of "invalid" packet in the promisc 
> mode, 
> because length field in the packet is set to 846 but the packet length on the 
> wire is actually 842.
> 
> In addition, Broadcom NICs did not allow the packets either, but raised an 
> error 
> flag that pushed onto the Wireshark, packets #2, 9, ... on the Broadcom 
> capture.
> 
> Please check the "Expert Info" under "Length", the packet is reported with 
> error 
> message " Length field goes past the end of the payload".
> 
> I hope that clarified the issue. If desired, we could provide you a patch 
> with 
> slight driver modifications that you could use to fix or verify the issue.

Yes, that completely resolves the question of why we weren't seeing 
these packets. Unfortunately, we do need to see them and we can't change 
the sender. Therefore, I'd very much appreciate the "slight driver 
modifications" that would allow that. Thank you for the analysis and 
response.
-- 
Dave Close

------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure contains a 
definitive record of customers, application performance, security 
threats, fraudulent activity and more. Splunk takes this data and makes 
sense of it. Business sense. IT sense. Common sense.. 
http://p.sf.net/sfu/splunk-d2d-c1
_______________________________________________
E1000-devel mailing list
E1000-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/e1000-devel
To learn more about Intel® Ethernet, visit 
http://communities.intel.com/community/wired

Reply via email to