Re: Ethernet padding in tcpdump captures?

[Andreas Sikkema <h323 () ramdyne nl>]

> Unless Linux is removing the padding before the packet gets to a PF_PACKET socket, I would expect to see padding for 
> short Ethernet packets in captures on Linux, at least if not done on the "any" device.  For *outgoing* packets, you 
> probably won't see the padding, but for *incoming* packets, I'd expect to see the padding on all OSes.

I was kinda hoping for masses of people screaming that they had never
seen Ethernet padding in a capture from a Linux machine.. Oh well, I
will ask the netfilter people again :-)

Thanks!

-- 
Andreas Sikkema
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe