Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] NetXRay 2.2 fileformat

From: Stig Bjørlykke <stig.bjorlykke@xxxxxxxxx>
Date: Fri, 17 Aug 2007 19:02:27 +0200
Den 17. aug. 2007 kl. 18.43 skrev Guy Harris:

Do those 4 bytes show up at the beginning, or the end, of the frame?
For some frame types, we find either 4 bytes of FCS or 4 bytes of junk
at the end of the frame.

They are at the end of each frame. Sometimes they have data and sometimes they are only zero's, so it may be junk.

Attached the first 220 bytes of a capture showing this. This frames contains LAPB with a Supervisory frame, which shall not contain any data.


--
Stig Bjørlykke

Attachment: msg.cap.gz
Description: GNU Zip compressed data