Wireshark · Ethereal-users: Re: [Ethereal-users] reading an "incorrect Checksum" with a SnoopCapture

[James Garrison <jhg@xxxxxxxxxxxxxxx>]

Is the server's NIC gigabit ethernet?  If so, all outgoing
packets probably have "incorrect checksum" because the
checksum calculation doesn't happen in the server, but on
the NIC, long after the packet has been captured.


julien lecomte wrote:
> Hi,
>  
> I would like some help about a problem:
>  
> At the end of a backup, I have an "Incorrect checksum" in a [FIN, 
> ACK] packet sent by the server where snoop is capturing the packets.
>  
> Can you tell me how Ethereal is deducing this? Usually, we see a 
> Incorrect checksum at the destination or because the destination did not 
> send an ACK message for this packet?

--
James Garrison                                Athens Group, Inc.
mailto:jhg@xxxxxxxxxxxxxxx                    5608 Parkcrest Dr
http://www.athensgroup.com                    Austin, TX 78731
PGP: RSA=0x92E90A3B DH/DSS=0x498D331C         (512) 345-0600 x150