Tuesday, December 18, 2007

用ethereal等抓包要注意的一个事项

今天抓包帧时发觉抓下来的包不符合以太网帧的要求:没有Preambel和FCS(这里是CRC校验)
上wikipedia查了查才发觉是这么回事:
Frames are the format of data packets on the wire. Note that a frame viewed on the actual physical hardware would show Start Bits, sometimes called the Preamble, and the trailing Frame Check Sequence. These are required by all physical hardware and is seen in all four following frame types. They are not displayed by packet sniffing software because these bits are removed by the Ethernet adapter before being passed on to the network protocol stack software.

我太菜了,orz

--
Best wishes,
Yours, iveney
Department, of Computer Science,
Zhongshan University (Sun Yat-sen University),
Guangzhou, China

No comments: