Wireshark · Ethereal-dev: Re: [Ethereal-dev] incorrect packet length

[Richard Sharpe <rsharpe@xxxxxxxxxxxxxxxxx>]

On Sat, 7 Dec 2002, J.Smith wrote:

> 
> >
> > Incorrectly?  The packet *is* 1514 bytes long - 14 bytes of Ethernet
> > header, 20 bytes of IP header, 20 bytes of TCP header, and 1460 bytes of
> > TCP payload.
> >
> > There are 1500 bytes of Ethernet *payload*; that's what tcpdump is
> > reporting.  That's the maximum amount of MAC client data according to
> > 3.1.1 "MAC frame format" in IEEE Std 802.3-2002 - but that doesn't
> > include the destination address, source address, and length/type fields
> > in the Ethernet header, nor does it include the FCS at the end.
> >
> 
> Oops. Guess I seriously screwed up here.

I would call it a small misunderstanding.

Seriously screwed up is when you decide you need to overtake a car on the 
freeway at 100 MPH and run into the back of a highway patrol car :-)

Regards
-----
Richard Sharpe, rsharpe[at]ns.aus.com, rsharpe[at]samba.org, 
sharpe[at]ethereal.com, http://www.richardsharpe.com