captured length > actual length

[Andrej van der Zee <andrejvanderzee () gmail com>]

Hi,

I am looking at a packet in Wireshark with:

* data link layer length 14 bytes
* total IP length of 44 bytes
=> TOTAL = 58 bytes

But, the captured bytes show 60. I was wondering where the extra 2
bytes come from?

The protocol is NBSS .

Thanks,
Andrej
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe