Error events and what we can understand from them
In this recipe, we will dive into error and event types, checksum errors, malformed packets, and other types of errors.
Getting ready
Start a capture, or open an existing file and start the expert system.
How to do it...
- From the
Analyzemenu, openExpert Information. Errors are listed at the top of the window:
In the preceding window that is brought as an example, you can see checksum errors; in this case, it can be because of real errors or offload.
- Clicking on a specific error takes us to the packet pane to see the error in the packet itself. This is presented in the following screenshot:
What you see in this event is a checksum error, and that the checksum is incorrect. In this case (file CAP_07_05), we see that all errors are coming from a single device, which is a good point to start to look where the problem is coming from. More about Ethernet and Ethernet errors later, in Chapter 8, Ethernet and LAN Switching.
How it works...
Checksum is an...
