Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] Ethernet FCS not verified

From: Martin Isaksson <martin.isaksson@xxxxxxxxxxxx>
Date: Mon, 4 Jul 2011 18:10:31 +0200
Hi again,

here are two packets - one packet with incorrect FCS and the other with correct FCS (according to version 1.4.2).

Thanks,
Martin

-----Original Message-----
From: wireshark-users-bounces@xxxxxxxxxxxxx [mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of Guy Harris
Sent: den 4 juli 2011 18:01
To: Community support list for Wireshark
Subject: Re: [Wireshark-users] Ethernet FCS not verified


On Jul 4, 2011, at 8:53 AM, Martin Isaksson wrote:

> Is there something I need to do..?

Send us a sample capture that works with the older versions but not with the newer versions, to make it easier to figure out what changed in the Ethernet dissector's "this part of the trailer is probably an FCS" detector (there's no explicit indication of whether a frame ends with an FCS, so we just have some heuristics) and to make it easier to test whether a fix we make works?

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe

Attachment: ethernet_fcs.pcap
Description: ethernet_fcs.pcap