[Winpcap-users] RE: Bogus IP Header

[Sanjay Badala]

If you are capturing the packets using ethereal, then there is an option
(ethereal > capture > Limit each packet to  XXX bytes ) to limit the
bytes to be captured from the packet.  Disable this option and you will
receive complete packets.

regards,

Sanjay

> Date: Fri, 17 Jun 2005 23:05:42 -0700
> From: "Gordon Graham" <gcgraham33 at hotmail.com>
> Subject: [Winpcap-users] Bogus IP Header
> To: winpcap-users at winpcap.org
> Message-ID: <BAY101-F95C74E88344D1AD053BA5DBF70 at phx.gbl>
> Content-Type: text/plain; format=flowed
>
> I just installed Ethereal and WinPcap (ver 3.0) today and am
> having trouble
> capturing packets properly. I am able to capture a series of
> packets but
> almost every one says "Bogus IP length 0 ..." or Bogus IP header ...".
>
> In the packet details area of Ethereal the Frame information
> says something
> like (1514 bytes on wire, 28 bytes captured). Different frames have a
> different number of "bytes on the wire" but all seem to say 28 bytes
> captured. I've tried promiscuous mode and not promiscuous
> mode with the same
> results. Otherwise, I'm using all the default values.
>
> I'm running on a Windows ME laptop using the integrated 8255
> fast ethernet
> controller and I'm connected to a NetGear router (home
> setup). I run the
> McAfee personal firewall but turned it off. I also have a
> docking station
> with a different Ethernet interface. I tried capturing from
> that interface
> with the same results.
>
> I posted this question on the Ethereal list. They suggested
> that it might be
> an issue with WinPcap and suggested I try here.
>
> Does anyone have an idea about what I might be doing wrong
> and how I can
> correct things?
>
> Any help would be greatly appreciated!
>
> Thanks!
> Gordon
>
  

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.winpcap.org/pipermail/winpcap-users/attachments/20050619/c80d9d0f/attachment.html