Wireshark-users: [Wireshark-users] captured length > actual length
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Andrej van der Zee <andrejvanderzee@xxxxxxxxx>
Date: Wed, 2 Feb 2011 22:24:43 +0900
Hi,

I am looking at a packet in Wireshark with:

* data link layer length 14 bytes
* total IP length of 44 bytes
=> TOTAL = 58 bytes

But, the captured bytes show 60. I was wondering where the extra 2
bytes come from?

The protocol is NBSS .

Thanks,
Andrej