Buy or Renew
Buy or Renew
Cisco + Splunk: It’s a new day for your data. Learn more.
 
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
4527
Views
0
Helpful
2
Replies

Ethernet Frame Header - Trailer (Variable Length)

kfarrington
Level 3
Level 3

‎11-10-2005 02:20 PM - edited ‎03-03-2019 12:46 AM

All,

I have four frames below (captured using ethereal) and would like to know what the trailer in the L2 frame is?

Is it just to pad the packet to the minimum ethernet frame length?

Many kind regards in advance,

Ken

Trailer 6 bytes

Frame 102 (60 bytes on wire, 60 bytes captured)

Arrival Time: Jul 16, 2003 06:36:44.412671000

Time delta from previous packet: 0.139895000 seconds

Time since reference or first frame: 2.674510000 seconds

Frame Number: 102

Packet Length: 60 bytes

Capture Length: 60 bytes

Ethernet II, Src: 00:02:a5:34:03:86, Dst: 00:50:8b:fd:d7:54

Destination: 00:50:8b:fd:d7:54 (CompaqCo_fd:d7:54)

Source: 00:02:a5:34:03:86 (30.42.101.39)

Type: IP (0x0800)

Trailer: 000000000000

Internet Protocol,

Trailer (lots of bytes)

Frame 113 (60 bytes on wire, 60 bytes captured)

Arrival Time: Jul 16, 2003 06:36:44.689337000

Time delta from previous packet: 0.071447000 seconds

Time since reference or first frame: 2.951176000 seconds

Frame Number: 113

Packet Length: 60 bytes

Capture Length: 60 bytes

Ethernet II, Src: 00:02:a5:34:b2:33, Dst: ff:ff:ff:ff:ff:ff

Destination: ff:ff:ff:ff:ff:ff (Broadcast)

Source: 00:02:a5:34:b2:33 (30.42.101.43)

Type: ARP (0x0806)

Trailer: 00000000000000000000000000000000...

Address Resolution Protocol (request)

Trailer 3 bytes

Frame 139 (60 bytes on wire, 60 bytes captured)

Arrival Time: Jul 16, 2003 06:36:45.230010000

Time delta from previous packet: 0.007420000 seconds

Time since reference or first frame: 3.491849000 seconds

Frame Number: 139

Packet Length: 60 bytes

Capture Length: 60 bytes

Ethernet II, Src: 00:b0:c2:d1:b7:fc, Dst: 00:50:8b:fd:d7:54

Destination: 00:50:8b:fd:d7:54 (CompaqCo_fd:d7:54)

Source: 00:b0:c2:d1:b7:fc (Cisco_d1:b7:fc)

Type: IP (0x0800)

Trailer: 000000

Trailer 5 bytes

Frame 175 (60 bytes on wire, 60 bytes captured)

Arrival Time: Jul 16, 2003 06:36:46.134412000

Time delta from previous packet: 0.000769000 seconds

Time since reference or first frame: 4.396251000 seconds

Frame Number: 175

Packet Length: 60 bytes

Capture Length: 60 bytes

Ethernet II, Src: 00:b0:c2:d1:b7:fc, Dst: 00:50:8b:fd:d7:54

Destination: 00:50:8b:fd:d7:54 (CompaqCo_fd:d7:54)

Source: 00:b0:c2:d1:b7:fc (Cisco_d1:b7:fc)

Type: IP (0x0800)

Trailer: 0000000000

Internet Protocol,

Labels:
0 Helpful
2 Replies 2

wdrootz
Level 4
Level 4

‎11-16-2005 12:41 PM

Trailer is like a label negotiated between the routers for specific packet along with CRC and the Trailer will be different according to the packet size.

0 Helpful

kfarrington
Level 3
Level 3
In response to wdrootz

‎11-17-2005 04:16 AM

Thats great. Many thx for the info. I am just wondering is this protocol field and contents is documented anywhere?

Do you have any idea about this?

Many kind regards,

Ken

0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents