Ask Your Question

Revision history [back]

Why do captured icmp packets show less bytes of data than ping sends

I'm trying to ping a site on Linux and by default it sends 56, bytes of data, so 64 including header data, but when I check the data for the captured packets in wireshark, it always shows 8 less, so 48 in this case. When I ping for 32 bytes of data on windows, the captured packets contain 32 bytes of data. Could someone tell me what's going on?