Ethernet CRC check in Wireshark

Hi!

I read that Ethernet add a CRC footer after payload.

I tried to observe this in WireShark in an ICMP PING request.

I can observe source, and destination mac, then the payload, but no
CRC.

Is the CRC somehow disappeared? Or is not sent? Or not shown in
Wireshark?

Thanks.

Here is the icmp request (pcap, base64 encoded)
1MOyoQIABAAAAAAAAAAAAP//
AAABAAAA0reJTYtdDgBiAAAAYgAAAAAbdw8hegAjaRyYDQgARQ AA
VLBWAAAuATaj0VWvaMCoZEkAAIgVB3oABNG3iU0gZAoACAkKCw wNDg8QERITFBUWFxgZGhscHR4f
ICEiIyQlJicoKSorLC0uLzAxMjM0NTY3

On Mar 23, 6:03*pm, jprudent <jprud...@gmail.com> wrote:
> Hi!
>
> I read that Ethernet add a CRC footer after payload.
>
> I tried to observe this in WireShark in an ICMP PING request.
>
> I can observe source, and destination mac, then the payload, but no
> CRC.
>
> Is the CRC somehow disappeared? Or is not sent? Or not shown in
> Wireshark?
>
> Thanks.

On Wed, 23 Mar 2011 04:03:42 -0700 (PDT)
jprudent <(E-Mail Removed)> wrote:

> Hi!
>
> I read that Ethernet add a CRC footer after payload.
>
> I tried to observe this in WireShark in an ICMP PING request.
>
> I can observe source, and destination mac, then the payload, but no
> CRC.
>
> Is the CRC somehow disappeared? Or is not sent? Or not shown in
> Wireshark?
>
> Thanks.

The CRC is added and removed by the hardware, so the OS, even at the lowest
level (where Wireshark hooks in) can't see it.

On Mar 23, 4:03*am, jprudent <jprud...@gmail.com> wrote:
> Hi!
>
> I read that Ethernet add a CRC footer after payload.
>
> I tried to observe this in WireShark in an ICMP PING request.
>
> I can observe source, and destination mac, then the payload, but no
> CRC.
>
> Is the CRC somehow disappeared? Or is not sent? Or not shown in
> Wireshark?

I believe it's only on the wire. There is no reason to pass the CRCs
around -- they're only meaningful on the wire.

DS

On Mar 24, 2:54*am, pk <p...@pk.invalid> wrote:
> On Wed, 23 Mar 2011 04:03:42 -0700 (PDT)
>
> jprudent <jprud...@gmail.com> wrote:
> > Hi!
>
> > I read that Ethernet add a CRC footer after payload.
>
> > I tried to observe this in WireShark in an ICMP PING request.
>
> > I can observe source, and destination mac, then the payload, but no
> > CRC.
>
> > Is the CRC somehow disappeared? Or is not sent? Or not shown in
> > Wireshark?
>
> > Thanks.
>
> The CRC is added and removed by the hardware, so the OS, even at the lowest
> level (where Wireshark hooks in) can't see it.

Thanks!