Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Ethereal-users: RE: [Ethereal-users] incorrect tcp checksums

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Richard Urwin <RUrwin@xxxxxxxxxxxxxx>
Date: Mon, 14 Oct 2002 09:31:01 +0100
Before someone else tells us...

You can already display-filter on bad checksums, both for IP and TCP. I
don't imagine that capture filtering will ever be up to the job.

The packet summary idea is good, though.

--
Richard Urwin, Private
"No 9000 series computer has ever made a mitsake or corrubiteddatatato."




-----Original Message-----
From: Richard Urwin [mailto:RUrwin@xxxxxxxxxxxxxx]
Sent: 14 October 2002 09:25
To: Richard Urwin; 'Davidson, Stuart'; ethereal-users@xxxxxxxxxxxx
Subject: RE: [Ethereal-users] incorrect tcp checksums


> I have also seen this (w2000sp2) and it can be quite annoying since
TCP-desegmentation
> fails to work for packets with TCP-checksum error (but fortunately
this check can be
> turned off in Ethereal). Also there was IP-checksum errors.

Yes, I get them too.

>> I assumed this was due to some lower level
>> software adding the correct checksums after Ethereal has grabbed the
packet.
> This could make sense but then it would be nice if Ethereal could
handle this
> in an "intuitive way", e.g. by "writing the correct checksum" and add
a "packet note" 
> about that these checksums were made by Ethereal.
> This could be enabled specific for each platform.

> Btw. It could be nice if checksum errors (or other errors) also could
be shown in the
> high level packet view (to get attention) - and if it was possible to
search/filter for
> erronous packets.

> Hmmm - I know I should contribute with some code instead of just
writing mails ;-)

It sounds like a two-line fix to me. It would make an easy introduction
to Ethereal for somebody...

Not me, I'm unable to build Ethereal at the moment; see elsewhere on the
dev list.

--
Richard Urwin, Private
"No 9000 series computer has ever made a mitsake or corrubiteddatatato."


________________________________________________________________________
This email has been scanned for all viruses by the MessageLabs SkyScan
service. For more information on a proactive anti-virus service working
around the clock, around the globe, visit http://www.messagelabs.com
________________________________________________________________________
_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users

________________________________________________________________________
This email has been scanned for all viruses by the MessageLabs SkyScan
service. For more information on a proactive anti-virus service working
around the clock, around the globe, visit http://www.messagelabs.com
________________________________________________________________________