How to see the FCS in Ethernet frames?

asked 2018-05-05 07:24:15 +0000

Student
1 ●2 ●2 ●2

updated 2019-01-04 18:25:01 +0000

cmaynard

11115 ●11 ●317 ●165 https://www.igt.com/

When using wireshark to sniff ethercat frames (while a Twincat project is working), I can see all but the FCS

edit retag flag offensive close merge delete

add a comment

2 Answers

Sort by » oldest newest most voted

answered 2018-05-05 08:08:38 +0000

NJL
120 ●2 ●24 ●8

updated 2018-05-05 08:16:40 +0000

Depending on your OS and/or how you captured your traffic it's highly likely it's not possible.

Personally I've never seen it even when capturing using passive fiber TAPs (via a Network Packet Broker).

See this post for more discussion (and possible solutions) to the problem: https://osqa-ask.wireshark.org/questi...

edit flag offensive delete link

Comments

Poor man's method when you don't have special equipment:

https://stackoverflow.com/questions/22101650/how-can-i-receive-the-wrong-ethernet-frames-and-disable-the-crc-fcs-calcul

Bob Jones ( 2018-05-05 11:00:01 +0000 )edit

You can do this with an Intel NIC on windows, too: https://www.intel.com/content/www/us/...

Christian_R ( 2018-05-05 20:05:08 +0000 )edit

@Christian_R: Nice! Didn't know about this. Thanks!

NJL ( 2018-05-05 20:18:15 +0000 )edit

@Christian_R, that Intel article talks about VLAN tags, not Frame Check Sequences. What am I missing?

cmaynard ( 2018-05-07 14:52:40 +0000 )edit

@cmaynard 1—enabled (Store bad packets. Store CRCs. Do not strip 802.1Q vlan tags)

Christian_R ( 2018-05-07 14:58:12 +0000 )edit

see more comments

answered 2018-10-04 15:42:17 +0000

Juzujka
1

Try this: https://stackoverflow.com/questions/2...

ethtool -K eth0 rx-fcs on #1 above: give us the FCS field ethtool -K eth0 rx-all on #2 above: even receive bad packets

and then Edit -> Wireshark -> Preferences -> Protocols -> Ethernet -> Assume packets have FCS

edit flag offensive delete link

add a comment