ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-users: Re: [Wireshark-users] Arp Trailer

From: Jaap Keuter <jaap.keuter@xxxxxxxxx>
Date: Mon, 20 Oct 2008 21:30:05 +0200
Hi,

ARP messages are 28 bytes long. Ethernet requires 64 octets on the wire, hence a trailer is applied. Why don't you see the trailer on the ARP requests your hosts sends out? That is probably because the trailer is appended after the frame has passed through the capture layer. On the incoming ARP reply you see it because it's coming from the wire.

Thanx,
Jaap

Hanna Frangiyyeh wrote:
Hi;
There is a field when I capture arp packet called Trailer on the arp reply packet. Any idea what that field is for.
Thanks
Hanna