Ethereal-users: [Ethereal-users] differing packet size

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: David Young <dyoung@xxxxxxxxxxxxxxxx>
Date: Mon, 03 Dec 2001 00:06:15 -0500
I am wondering if anyone can help me interpret this:

I have a Win98 box running NetXray, and Win2K box running Ethereal, and a
RedHat 7.0 server all connected to an Ethernet repeater. When the Win98
sends email from Outlook to the RedHat mail server, the server never
receives the final packet, which contains only "\r\n.\r\n", and therefore
hangs.

NetXray shows this problem packet as being 63 bytes in length, and the
packet correctly ends with "\r\n.\r\n". Ethereal shows the exact same packet
as being 60 bytes in length, and ends with "\r\n.\r\n" *plus* an extra
seemingly random byte.

I'm guessing that NetXray's packet size counts the CRC, whereas Ethereal
does not. Assuming that, there is still a 1 byte difference between how
NetXray and Ethereal see the packet. Is the Win98 box sending a runt that
Ethereal is misinterpreting?