Re: Header checksum: 0x0000 [incorrect, should be 0x8494] and bound protocols to the interface.

[Stephen Fisher <steve () stephen-fisher com>]

On Tue, Sep 21, 2010 at 03:03:23PM +0100, Marco Simone Zuppone wrote:

> I'm struggling against this "Header checksum: 0x0000 [incorrect, 
> should be 0x8494]" so I disabled the all the checksum offload option 
> of the NIC driver on my Windows 7 64bit but still I have some packetes 
> with this problem.

You can also disable checksum checks in the IP and TCP (and other) 
protocols in Wireshark since bad checksum frames often aren't passed up 
to Wireshark in the first place anyway.

> So I tried to unbind every protocol and service from the NIC (IPv4 and 
> 6, Qos, etc etc...) and it is going like a charm. Now my ''novice'' 
> question: Is is advisable to unbind all the protocols and services 
> from the NIC interface when you sniif traffic? Is this a good idea or 
> not? Pro and Cons?

It doesn't hurt, but it isn't necessary usually, although that is a fix 
for the checksum problems that I hadn't heard before.

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe