Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 3473] Ethernet dissector passes FCS to sub-dissectors

Date: Wed, 20 May 2009 16:23:54 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3473


Guy Harris <guy@xxxxxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |FIXED




--- Comment #6 from Guy Harris <guy@xxxxxxxxxxxx>  2009-05-20 16:23:52 PDT ---
I've added a preference to the Ethernet dissector to force it to assume that
all packets have an FCS if it doesn't already know whether the packet has an
FCS.  The default is off, because many captures don't have the FCS, and, even
in those that do, outgoing frames won't have the FCS (as indicated, the IEEE
standards are completely irrelevant here, as they don't control what the
network adapter presents to the host).

If you have captures where there are 4 extra bytes at the end of all the
Ethernet packets but they aren't a valid FCS, please indicate with what tool
the capture was done, with what version of what OS the capture was done, and
with what hardware the capture was done.


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.