Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.
Wireshark logo

Wireshark-users: [Wireshark-users] captured length > actual length

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Andrej van der Zee <andrejvanderzee@xxxxxxxxx>
Date: Wed, 2 Feb 2011 22:24:43 +0900
Hi,

I am looking at a packet in Wireshark with:

* data link layer length 14 bytes
* total IP length of 44 bytes
=> TOTAL = 58 bytes

But, the captured bytes show 60. I was wondering where the extra 2
bytes come from?

The protocol is NBSS .

Thanks,
Andrej
Wireshark logo footer

© Wireshark Foundation · Privacy Policy

Facebook·Mastodon·Twitter·YouTube