>> can sniff the following ICMP echo request packet, correctly reporting its >> length as 47 bytes...
>Is that a packet being transmitted by the machine running Ethereal? No it isn't. I'm sniffing an 802.11 link between an XP laptop and a Linksys WRT54G wireless router, using a third machine with an 802.11 card. >When it's transmitted on an Ethernet, the packet on the Ethereal >*WILL* be padded to 60 bytes That's what I know to be the spec, which is why I find Ethereal's reported sub-60-byte packets confusing. Maybe Ethereal is not presenting the exact bytes being returned from WinPCap. I'll write my own logging app to see if that's the source of confusion. Will report back to close the thread or ask further when I get to the bottom of that question. Rob--- ================================================================== This is the WinPcap users list. It is archived at http://www.mail-archive.com/[EMAIL PROTECTED]/ To unsubscribe use mailto: [EMAIL PROTECTED] ==================================================================
