The checksum can be offloaded to hardware and not yet be applied for the packets sent from the machine. This is done at least in Sun Sparc, the checksum is 0 in these cases. From Wireshark 0.99.6 these packets are marked with "Checksum offloaded" (but the default packet coloring still marks them as failures).
/Gerhard On Dec 12, 2007 6:57 PM, Richard Whittaker <[EMAIL PROTECTED]> wrote: > Greetings: > > We've done a couple of rounds of network captures of serveral workstations, > and have run into some significant "oddness"... > > In the first round of captures, on 6 of the 8 workstations there were in > excess of 50% of all packets tagged at "TCP CHECKSUM INCORRECT"... > > Did some research, found the option to disable TCP checksumming, and re-ran > the captures... We're getting the same results on the same workstations... Is > this a badly configured network/workstation/driver?... > > Thanks, > Richard. > > > Richard Whittaker, CISSP > Config Manager, Hardware and O/S > NorthwesTel Inc. > (867) 393-7756 > Temp number: (867) 668-5389 > > > > > _______________________________________________ > Wireshark-users mailing list > Wireshark-users@wireshark.org > http://www.wireshark.org/mailman/listinfo/wireshark-users > > -- Gerhard The sender address really contains .nospam. _______________________________________________ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users
