On Jan 20, 2004, at 1:07 PM, john g wrote:
but i have frames captured (on ethereal) that show up as 54 bytes as well. (it was a Ethernet II frame)
can someone explain how that is possible ?
If the frame was sent by the machine running Ethereal, it was supplied to libpcap by the networking code *before* it was transmitted, and therefore *before* it was padded and *before* it had a CRC added. (Ethernet devices generally do not receive packets that they transmit, so it can't be supplied to the networking code after it's transmitted.)
_______________________________________________ Ethereal-users mailing list [EMAIL PROTECTED] http://www.ethereal.com/mailman/listinfo/ethereal-users
