mailing list archives
From: Stuart Kendrick <skendric () fhcrc org>
Date: Sat, 24 Nov 2012 13:27:00 -0800
I'm seeing ARP Requests and Responses with the Ethernet Frame check
sequence set to all zeros .... the expert layer flags these as 'Ethernet
Frame Check Sequence Incorrect'
Tentatively, all the emitters of these ARPs are Windows guests on a
VMWare cluster ...
I captured all ARPs in this particular data center for an hour+ ...
~307,000 ... of which 1100 have an Ethernet FCS of 0x00000000
I've focused on a handful of these ... for one of these VMs (an AD
domain controller), /every single ARP/ which it emits sports an FCS of
For the other handful on which I've filtered, they are mixed: in some
cases, just a few such ARPs, in other cases mostly but not all.
Anyone recognize this?
Sent via: Wireshark-users mailing list <wireshark-users () wireshark org>
mailto:wireshark-users-request () wireshark org?subject=unsubscribe
- eth.fcs==0x00000000 Stuart Kendrick (Nov 24)