Frame Length that is greater than IP Total Length plus Ethernet Header

frame.len

asked 2020-11-26 13:44:00 +0000

Driss
1

Hello,

i was capturing the traffic in an F5 and i have discovered that the Frame Length > IP Total Length + Ethernet Header.

Any explanation ???

Thank you

edit retag flag offensive close merge delete

Comments

Can you put some number in here? That might help to explain what you see. As we can't see it at all.

hugo.vanderkooij ( 2020-11-26 14:16:01 +0000 )edit

add a comment

1 Answer

Sort by » oldest newest most voted

answered 2020-11-26 13:52:34 +0000

grahamb

flag of United Kingdom of Great Britain and Northern Ireland

23790 ●4 ●950 ●227 https://www.wireshark.org

F5 can add an ethernet trailer. The dissector for this is normally disabled, go to Analyze -> Enabled Protocols and search for f5. Check the enable box for f5ethtrailer.

edit flag offensive delete link

Comments

Correct, Thank you

Driss ( 2020-11-26 17:01:35 +0000 )edit

You're welcome. The normal practice here is to accept an answer by clicking the checkmark to the left of it.

grahamb ( 2020-11-26 17:28:35 +0000 )edit

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

Stats

Asked: 2020-11-26 13:44:00 +0000

Seen: 183 times

Last updated: Nov 26 '20

Frame Length that is greater than IP Total Length plus Ethernet Header edit

Comments

1 Answer

Comments