This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

ETHERNET FRAME CHECK SEQUENCE INCORRECT

0

Estimados,

al realizar una captura en el puerto principal del router, se obtiene paquetes con la sgte descripcion:

464 1.410703000 10.6.20.87 10.6.13.87 TCP 64 3329→502 [SYN] Seq=0 Win=2048 Len=0 [ETHERNET FRAME CHECK SEQUENCE INCORRECT]

En la ventana inferior se visualiza

Frame check sequence: 0xfa032805 [incorrect, should be 0x041aa0e6]

FCS Bad: True Expert Info (Error/Checksum): Bad checksum Bad checksum Severity level: Error

Transmission Control Protocol, Src Port: 3329 (3329), Dst Port: 502 (502), Seq: 0, Len: 0

El analisis es a raíz de que el escaneo desde la Ip 10.6.20.87 no obtiene respuesta de la IP 10.6.13.87 y estamos tratando de determinar donde esta el problema, si es en el origen o sea en el equipo origen, en el medio de comunicación (Wan) o en el equipo destino. Gracias,

asked 30 Sep '14, 13:35

PETER%20F's gravatar image

PETER F
1●1●1●1
accept rate: 0%

edited 01 Oct '14, 04:52

grahamb's gravatar image

grahamb ♦
19.8k●3●30●206

[From Google translate, with some manual editing]

Dear ,

to take a capture in the main port of the router, packets with the following description are obtained :

10.6.20.87 10.6.13.87 1.410703000 464 64 3329 → 502 TCP [ SYN ] Seq = 2048 Win = 0 Len = 0 [ ETHERNET FRAME CHECK SEQUENCE INCORRECT ]

In the lower window is displayed

Frame check sequence : 0xfa032805 [ incorrect , Should be 0x041aa0e6 ]

FCS Bad : True Expert Info ( Error / Checksum ) : Bad Bad checksum checksum Severity level: Error


Transmission Control Protocol, Src Port : 3329 (3329) , Dst Port : 502 ( 502 ) , Seq : 0, Len : 0

The following analysis is that scanning from IP 10.6.20.87 no response from the IP 10.6.13.87 and are trying to determine where the problem is , if either the source or the source computer , in the middle of communication ( Wan ) or on the target computer . Thank you ,

(30 Sep ‘14, 14:15) Bill Meier ♦♦