1

When I capture from wireshark traffic I can see data like this frame data

Where I can see the specification of each field?

When I read wiki https://en.wikipedia.org/wiki/Ethernet_frame there is nothing like this. Also in wiki I can see that there should be for example MAC adresess. Where are they?

  • 2
    The IEEE has the specifications for the IEEE LAN protocols (ethernet, token ring, Wi-Fi, etc.). Most of what you see there is not actually part of the frame, but of meta data created by Wireshark. You need to scroll down more to the Ethernet II section to see more of the frame itself, and the window below that will have the actual bits (in hex) of the frame. – Ron Maupin Dec 2 '18 at 15:07
  • just too add: if the information is between square brackets, it's added by wireshark and not part of the spec – confused00 Dec 3 '18 at 2:49
  • Did any answer help you? If so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you can provide and accept your own answer. – Ron Maupin Dec 25 '18 at 10:12
3

The Ethernet frame is (mostly) defined in IEEE 802.3 Clause 3. The official standards can be downloaded from here. There are countless other sources on the frame formats as well.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.