Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

WireShark reports that the ICMP checksums generated by the Unix ping application are wrong. What is going on!?

April 26, 2017application checksums going ICMP ping reports Unix Wireshark wrong

0

Posted

WireShark reports that the ICMP checksums generated by the Unix ping application are wrong. What is going on!?

1 Answer

0

Posted

An older version of the stub code only saved the first 96 bytes of the packets it receives and the generated ICMP packets are 98 bytes, hence WireShark’s checksum does not take into account the last 2 bytes. The latest version of the stub code has the packet dump length increased to 100 bytes. You may also modify sr_router.h to increase PACKET_DUMP_SIZE yourself.