Wireshark
the world's foremost network protocol analyzer
Wireshark-users: Re: [Wireshark-users] Ethernet packets are less than 64 bytes
From: "Chad Dailey" <chad@xxxxxxxxxxxxxxxxxxx>
Date: Wed, 14 Nov 2007 15:20:25 -0600
Network diameter should not exceed 512 bit-times (64 bytes) to ensure the collision detect mechanism operates correctly (14 bytes header, 46 bytes data, 4 bytes CRC). This includes repeater hops and propagation delay. For a bit more detail, search G0ogle books: 802.3 network diameter. The Network Consultant's Handbook should pop up... probably page 66.
On 11/13/07, Steve Pennington <
steve.pennington@xxxxxxxxxxxxx> wrote:
I've started to experiment recently with Version 0.99.6a (SVN Rev 22276) and WinPcap version 4.0.1 which was the recommended version when I installed Wireshark. As far as I'm aware, ethernet frames should be between 64 and 1518 bytes long and, if the data section is less than 46 bytes, padding should be added to make up the minimum length. Further, I believe that this minimum length is something to do with collisions.
- References:
- [Wireshark-users] Ethernet packets are less than 64 bytes
- From: Steve Pennington
- [Wireshark-users] Ethernet packets are less than 64 bytes
- Prev by Date: Re: [Wireshark-users] Starting Wireshark Capture Blocks NetworkTraffic
- Next by Date: [Wireshark-users] files permissions when using dumpcap with Multiple file
- Previous by thread: Re: [Wireshark-users] Ethernet packets are less than 64 bytes
- Next by thread: [Wireshark-users] files permissions when using dumpcap with Multiple file
- Index(es):