This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I have a server that is continually incrementing Received Address Errors. This is seen when using netstat -s. I have captures of the traffic but I am not sure how to go about displaying these errors in Wireshark or if that is possible. I tried using the following filter with no success:

ipmi.tr04.rx_ipaddr_err

Anyone got any ideas?

asked 16 Mar '11, 10:54

Tom's gravatar image

Tom
16112
accept rate: 0%


You may be seeing those packets an not realize it. Here's is IBM's definition for what NetStat is showing you.

Datagrams Received Address Errors The number of input datagrams discarded because the IP address in their IP header destination field was not a valid address to be received at this entity. This count includes addresses that are not valid (for example, 0.0 0.0) and addresses for classes that are not supported (such as Class E). For entities that are not IP gateways and therefore do not forward datagrams, this counter includes datagrams discarded because the destination address was not a local address. Valid values are positive integers in the range 0 to 2147483647 and can include the use of the AVG, MIN, MAX, or SUM functions. For example, to express 52 for the number of IP datagrams that are discarded because of address errors, enter 52.

There could be quite a few things causing this based on that first sentence in the definition.

permanent link

answered 17 Mar '11, 06:03

GeonJay's gravatar image

GeonJay
4705922
accept rate: 5%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×48
×20
×5

question asked: 16 Mar '11, 10:54

question was seen: 14,339 times

last updated: 17 Mar '11, 06:03

p​o​w​e​r​e​d by O​S​Q​A