That frame is 60 bytes long... the minimum is 64 bytes, and the drivers for most NICs will not send you the 4-byte CRC at the end of the frame... so that is a valid ethernet ARP frame; remember that ethernet frames are required to be a minimum of 64 bytes (measured from destination mac addr to the end of the CRC), and they get padded to that value if the upper protocols (i.e. ARP) don't use the minimum ethernet payload. Use wireshark to decode the it.
发布评论
评论(1)
该帧长 60 字节...最小值为 64 字节,大多数 NIC 的驱动程序不会在帧末尾向您发送 4 字节 CRC...因此这是一个有效的以太网 ARP 帧;请记住,以太网帧必须至少为 64 字节(从目标 mac 地址到 CRC 末尾测量),如果上层协议(即 ARP)不使用最小以太网有效负载,它们将被填充到该值。使用 wireshark 对其进行解码。
That frame is 60 bytes long... the minimum is 64 bytes, and the drivers for most NICs will not send you the 4-byte CRC at the end of the frame... so that is a valid ethernet ARP frame; remember that ethernet frames are required to be a minimum of 64 bytes (measured from destination mac addr to the end of the CRC), and they get padded to that value if the upper protocols (i.e. ARP) don't use the minimum ethernet payload. Use wireshark to decode the it.