D
David
I am getting a lot of 'illegal length' packets counted on my network
equipment. When I did a packet capture (ethereal) I found that the ARP
packets being sent by the XP box were only 42 bytes in length (Packets
sent from cisco kit were captured at 60 bytes). The minimum ethernet
packet size is 64 bytes - I'll accept the 4 bytes difference on the
cisco's as being preamble or similar not being captured but 42 bytes is
a bit too short!!
The packet data stops immediately after the ARP data with no padding at
all, I know MS got some flak over using random memory data to pad
(rather than 0's or abcdefghijk etc) but it seems that the fix has
removed the padding entirely!!
This is XP pro with SP2 & set to auto update so should be on latest
versions.
I have verified it on other boxes as well.
Any comments?
equipment. When I did a packet capture (ethereal) I found that the ARP
packets being sent by the XP box were only 42 bytes in length (Packets
sent from cisco kit were captured at 60 bytes). The minimum ethernet
packet size is 64 bytes - I'll accept the 4 bytes difference on the
cisco's as being preamble or similar not being captured but 42 bytes is
a bit too short!!
The packet data stops immediately after the ARP data with no padding at
all, I know MS got some flak over using random memory data to pad
(rather than 0's or abcdefghijk etc) but it seems that the fix has
removed the padding entirely!!
This is XP pro with SP2 & set to auto update so should be on latest
versions.
I have verified it on other boxes as well.
Any comments?