 | 1 | initial version |
Hi,
The two octets field is used to indicate payload size when the value is below 0x0600 (1536). Only when the value is above 0x0600 does it refer to the protocol encapsulation.
In your case, this 0x0000 value would indicate a length of 0 but there are 286 bytes of data so this does not seem normal.
I can't think of a legitimate reason off the top of my head for this frame. You could investigate the origin by making sure (with more packet capture) it is generated from the Netgear device itself and not by another host (physical host or virtual machine) connected to it.
Hope this helps.
Cheers,
JFD
