The minimum size of an ethernet frame is 64 bytes, anything beneath that is a runt. But Ntop, like most other packet analyzers, do not count the 4 byte CRC when calculating the frame size. So you ARP requests and reply's will count as runts since those packets are ethernet frames with a tiny bit of data and mostly padding padding to get up to ethernet's minimum requirement of 64 bytes with CRC.
----- Original Message ----- From: "ROGER Yannick" <[EMAIL PROTECTED]> To: "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]> Sent: Wednesday, June 26, 2002 4:10 AM Subject: [Ntop] [ETHERNET] Packets runts Hi, In Global Traffic Statistics page (from Stat/Traffic), I have lots of Packets with size <64 bytes. These "packets" are they ethernet-packets? Does it mean that I have runts packets on my network? Regards, Cordialement, Yannick ROGER Groupe UNIBAIL T�l: 01 53 43 73 56 ---------------------------------------------------------------------------- ---- > ----------------------------------------- (on srvmtp01.unibail.fr) > > This message is confidential; its contents do not constitute a commitment > by the sender's society except where provided for in a written agreement > between you and sender's society. Any unauthorised disclosure, use or > dissemination, either whole or partial, is prohibited. If you are not the intended > recipient of the message, please notify the sender immediately. > > Ce message est confidentiel ; son contenu ne represente en aucun cas un > engagement de la part de la societe de l'emetteur sous reserve de tout accord > conclu par ecrit entre vous et la societe de l'emetteur. Toute publication, > utilisation ou diffusion, meme partielle, doit etre autorisee prealablement. > Si vous n'etes pas destinataire de ce message, merci d'en avertir immediatement > l'expediteur. > > --------------------------------------------------------- > _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://lists.ntop.org/mailman/listinfo/ntop
