Question regarding oversized frames
"Grant Mills" <[email protected]> Tue, 5 Sep 2006 13:30:34 -0700
| Newsgroups | gmane.network.ethereal.user |
|---|---|
| Message-ID | <[email protected]> |
------------------- The Ethereal project is being continued at a new site. Please go to http://www.wireshark.org and subscribe to [email protected]. Don't forget to unsubscribe from this list at http://www.ethereal.com/mailman/listinfo/ethereal-users ------------------- I'm trying to view some packets generated by a SmartBits. I generate a 1514 byte frame on the Smart Bits. This goes out and ethereal displays it. The device on the other end, loops it back (Swaps Src & Dest MAC & IP Addrs.) The SmartBits capture tools receives and displays the frame. Ethereal doesn't. There is one slight modification to frame. Due to a hardware limitation on the DUT, the return frame is now 1516 bytes (not including CRC.) We're forced to use 4 byte alignment on our transmit. So the returned frame is now over sized. I have witnessed v0.10.7 of Ethereal displaying frames of this size, but 0.10.10 does not. I tried WireShark 0.99.3 and it doesn't display the over sized frames either. I'm about to go research pcap/tcpdump to see if the problem lies there. I really need to either configure Ethereal/WireShark/Pcap to display these over sized frames or find a tool that does. Any help will be appreciated. Thanks in advance. -- Grant Mills [email protected]