Why do I see this all the time - clearly the checksum cannot be wrong, and I dont think I have wireshark configured to check this anyway - see attachments Can I turn this off somewhere? All my googling suggests the two places below should have done this?? I'm using Version 2.0.5
asked 08 Aug '16, 05:43  wratty |
2 Answers:
IP and UDP/TCP are layer 3 and 4, but your CRC error is on Ethernet, which is layer 2. So clearly those settings you mention are irrelevant. You should check if "Assume packets have FCS" and "Validate the Ethernet checksum if possible" are enabled for the Ethernet protocol dissector. answered 08 Aug '16, 05:47  Jasper ♦♦ |
Wireshark's code to try to detect the presence of an Ethernet FCS might not be working. Please file a bug on this at the Wireshark Bugzilla, attaching, if you can, a small capture that shows it - one frame would be sufficient. answered 08 Aug '16, 17:01  Guy Harris ♦♦ |
Yes you are correct - I was being an idiot. Thanks. Sorted.
Don't be too hard on yourself - everybody can mistake those things every once in a while :-)