Riverbed Cascade Pilot Personal Edition: Take Wireshark to the Next Level - Advanced Triggers and Alerts; Web and VoIP Analytics; Long-Term Trending and Forensics; Deep Packet Analysis with Wireshark

Wireshark-users: Re: [Wireshark-users] CRC errors at router

Date Index Thread Index Other Months All Mailing Lists

Date Prev Date Next Thread Prev Thread Next

From: Alex Lindberg <alindber@xxxxxxxxx>
Date: Thu, 7 May 2009 13:12:43 -0700 (PDT)

CRC errors are all most always the result of a mismatch in port duplex settings.

If a device or port is configured with auto-negotiation disabled and is statically configure to 100MB/Full Duplex, and the connected port is enabled for auto-negotiation, then the second port will set itself to 100MB/Half Duplex. The result being that the second port will see CRC errors if it observes a collision. This can cause a host of problems from problems viewing web pages, control issues of TCP devices, to poor/choppy voice quailtiy for VoIP sessions.

The port that detects CRC errors will not accept the packet into its switching/routing engine because the packet is in error, hence this packet will not showup if the port is mirrored to allow packet capture.

The "fix" is to set both ports the same. One note - many devices allow the ports to determine if the connection is MDI-MDI or MDI-MDIX and will set the port as necessary to allow a straight though cable to work when connecting MDI (Switch) ports together. In many cases this will not work if auto-negotiation is disabled.

Wireshark will not see any errors, except perhaps TCP retransmissions.

--- On Wed, 5/6/09, Craig OBrien <craigo@xxxxxxxxx> wrote:

From: Craig OBrien <craigo@xxxxxxxxx>
Subject: [Wireshark-users] CRC errors at router
To: wireshark-users@xxxxxxxxxxxxx
Date: Wednesday, May 6, 2009, 12:14 PM

The FastEthernet interface  on our cisco router is gathering input errors.   
 Generally at the rate that the CRC's errors are incrementing, it indicates
either a faulty application or speed negotiation issues with an internal server
or computer. But in not
 sure what,

 Using wireshark, what would be the best method of capturing data on that port
so I can at least get a handle of what's doing these CRC errors?

Thanks


Craig O'Brien
Steen Outdoor Advertising / Big Mountain Imaging
(215) 334-1700 x166

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe

References:
- [Wireshark-users] CRC errors at router
  - From: Craig OBrien

Prev by Date: Re: [Wireshark-users] Sample capture files
Next by Date: [Wireshark-users] Display Filter "tcp.pdu.time"
Previous by thread: [Wireshark-users] CRC errors at router
Next by thread: Re: [Wireshark-users] CRC errors at router
Index(es):
- Date
- Thread