<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE>Message</TITLE>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.2800.1505" name=GENERATOR></HEAD>
<BODY><!-- Converted from text/plain format -->
<P><FONT size=2>If you are capturing the packets using ethereal, then there is
an option (ethereal > capture > Limit each packet to XXX bytes ) to
limit the bytes to be captured from the packet. Disable this option and
you will </FONT><FONT size=2>receive complete packets.</FONT></P>
<P><FONT size=2>regards,</FONT></P>
<P><FONT size=2>Sanjay</FONT></P>
<P><FONT size=2>> Date: Fri, 17 Jun 2005 23:05:42 -0700<BR>> From: "Gordon
Graham" <gcgraham33@hotmail.com><BR>> Subject: [Winpcap-users] Bogus IP
Header<BR>> To: winpcap-users@winpcap.org<BR>> Message-ID:
<BAY101-F95C74E88344D1AD053BA5DBF70@phx.gbl><BR>> Content-Type:
text/plain; format=flowed<BR>><BR>> I just installed Ethereal and WinPcap
(ver 3.0) today and am<BR>> having trouble<BR>> capturing packets
properly. I am able to capture a series of<BR>> packets but<BR>> almost
every one says "Bogus IP length 0 ..." or Bogus IP header ...".<BR>><BR>>
In the packet details area of Ethereal the Frame information<BR>> says
something<BR>> like (1514 bytes on wire, 28 bytes captured). Different frames
have a<BR>> different number of "bytes on the wire" but all seem to say 28
bytes<BR>> captured. I've tried promiscuous mode and not promiscuous<BR>>
mode with the same<BR>> results. Otherwise, I'm using all the default
values.<BR>><BR>> I'm running on a Windows ME laptop using the integrated
8255<BR>> fast ethernet<BR>> controller and I'm connected to a NetGear
router (home<BR>> setup). I run the<BR>> McAfee personal firewall but
turned it off. I also have a<BR>> docking station<BR>> with a different
Ethernet interface. I tried capturing from<BR>> that interface<BR>> with
the same results.<BR>><BR>> I posted this question on the Ethereal list.
They suggested<BR>> that it might be<BR>> an issue with WinPcap and
suggested I try here.<BR>><BR>> Does anyone have an idea about what I
might be doing wrong<BR>> and how I can<BR>> correct
things?<BR>><BR>> Any help would be greatly appreciated!<BR>><BR>>
Thanks!<BR>> Gordon<BR>><BR> </FONT> </P></BODY></HTML>