This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Packet length shown in Wireshark

0

Does the packet length shown in Wireshark in the main column under Length include the header length?

I am working out bottleneck bandwidth and need to know.

Thank you.

Steve.

asked 11 Mar '12, 06:15

sjb89's gravatar image

sjb89
6113
accept rate: 0%


One Answer:

1

The packet length (aka the field named frame.len) is the size of the frame as seen "on the wire".

Note that it's possible that the actual bytes captured may be smaller if a "snaplen" limit has been set for the capture to only keep some initial part of each frame; the packet length shown will still be the original length of the frame.

answered 11 Mar '12, 08:08

Bill%20Meier's gravatar image

Bill Meier ♦♦
3.2k1850
accept rate: 17%

Thank you for this.

(11 Mar '12, 11:09) sjb89