I presume there shall be one more problem
The Ndis layer usually assumes the packet which it gets is CRC valid.
You cannot ask the software to recompute it, as it is calculation
intensive. It amounts to going through each of the 1546 bytes in the
packet to arrive at a 4 byte CRC.
The best approach will be to have a placeholder for CRC and make ur
file dissector look at the field.
Otherwise I am sure your frames will drop due to too much of CPU computation.
On 4/20/05, {Pedro Lucas-Suporte Netcount} <[EMAIL PROTECTED]> wrote:
> imho, if the CRC for the frame is wrong, the frame is discarded and counted
> as bad frame (and not stat'ed by winpcap (?), but stat'ed e.g. by netstat)
> So, even if you can't get it from winpcap, you can always compute a
> posteriori the CRC that the hw received.
>
> > Dave Barratt wrote:
> > > Is there any method in winpcap for getting the received frame hardware
> > > CRC (the 4 bytes following the end of the frame data)?
> >
> > No. Some Windows drivers *might* either supply that by default, or
> > might do so if configured appropriately, but there's no standard way to
> > request it, so there's no API in WinPcap to request it. Some adapters
> > might not have an option to supply it, and some adapters might but might
> > have a Windows driver that doesn't enable that option, in which case you
> > can't get it on Windows.
> >
> >
> >
> > ==================================================================
> > This is the WinPcap users list. It is archived at
> > http://www.mail-archive.com/winpcap-users@winpcap.polito.it/
> >
> > To unsubscribe use
> > mailto: [EMAIL PROTECTED]
> > ==================================================================
>
> ==================================================================
> This is the WinPcap users list. It is archived at
> http://www.mail-archive.com/winpcap-users@winpcap.polito.it/
>
> To unsubscribe use
> mailto: [EMAIL PROTECTED]
> ==================================================================
>
================================================================= This is the
WinPcap users list. It is archived at
http://www.mail-archive.com/winpcap-users@winpcap.polito.it/
To unsubscribe use
mailto: [EMAIL PROTECTED]
=================================================================
