FCS. I use EtherPeek these days, which does account for the 4-byte FCS, but
Sniffer does not, as I recall.
Priscilla
At 04:30 AM 6/15/01, Burnham, Chris wrote:
>When sniffing a TCP conversation on NAI Sniffer pro. why do ack only packets
>show a length of 60 bytes when the minimum ether frame s
Yes, Minimum Ethernet frame is 64 but Sniffers do not include CRC when
displaying packets
Gio
""Burnham, Chris"" wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> When sniffing a TCP conversation on NAI Sniffer pro. why do ack only
packets
> show a length of 60 bytes when the
64 bytes is the minimum length of the entire frame. The mininum size of the
data portion of the frame is 38 bytes for 802.3 and 46 bytes for Ethernet.
TCP/IP Illustrated Volume 1 is the source of this data and altough slightly
dated probably the best book on TCP/IP in print.
""Burnham, Chris"" w
When sniffing a TCP conversation on NAI Sniffer pro. why do ack only packets
show a length of 60 bytes when the minimum ether frame should be 64
?/ where are the other 4 bytes
Chris Burnham,
Systems Engineer,
Delphis Consulting Plc.
Tel: +(44) 020 7916 0200
Mob: +(44) 07799403576
[E
4 matches
Mail list logo
