Wireshark mailing list archives
captured length > actual length
From: Andrej van der Zee <andrejvanderzee () gmail com>
Date: Wed, 2 Feb 2011 22:24:43 +0900
Hi, I am looking at a packet in Wireshark with: * data link layer length 14 bytes * total IP length of 44 bytes => TOTAL = 58 bytes But, the captured bytes show 60. I was wondering where the extra 2 bytes come from? The protocol is NBSS . Thanks, Andrej ___________________________________________________________________________ Sent via: Wireshark-users mailing list <wireshark-users () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-users Unsubscribe: https://wireshark.org/mailman/options/wireshark-users mailto:wireshark-users-request () wireshark org?subject=unsubscribe
Current thread:
- captured length > actual length Andrej van der Zee (Feb 02)
- Re: captured length > actual length Alan Tu (Feb 02)
- Re: captured length > actual length Sake Blok (Feb 02)
- Re: captured length > actual length Andrej van der Zee (Feb 02)