Networking-Forums.com

Professional Discussions => Routing and Switching => Topic started by: sergeyrar on January 02, 2017, 07:53:14 AM

Title: Ethernet trailer
Post by: sergeyrar on January 02, 2017, 07:53:14 AM
Hi,

Does someone know what that is? and why it is there...?

Is it just a pcap decoding bug(feature)?

Title: Re: Ethernet trailer
Post by: deanwebb on January 02, 2017, 08:08:19 AM
Down in the packet contents, we can see that it's padding added to get the frame to be the correct minimum size.

More info: http://networkengineering.stackexchange.com/questions/7095/wireshark-etherent-ii-trailer-field
Title: Re: Ethernet trailer
Post by: sergeyrar on January 02, 2017, 09:05:26 AM
Are you sure?

As far as I know the minimum Ethernet frame size is 64 bytes, this one is 126.
Title: Re: Ethernet trailer
Post by: deanwebb on January 02, 2017, 09:09:43 AM
Well, why is it 126? What's going on with the sender?
Title: Re: Ethernet trailer
Post by: wintermute000 on January 02, 2017, 04:01:41 PM
Interesting, I can't explain that off the top of my head or a 30 second google.
You're both correct
- The ethernet trailer is padding added to the end of a frame to make up minimum size
- minimum size is 64 bytes (including 4 byte CRC)

Can't explain why a 126 byte frame has a trailer. Though I can't say I've ever looked into this topic or even ethernet trailers at all!

BTW welcome back sergey!
Title: Re: Ethernet trailer
Post by: sergeyrar on January 03, 2017, 03:28:39 AM
Thanks
:pub:

Had too much work lately...