What are the 0 bytes at the end of an Ethernet frame in Wireshark?

14,759

Check the Ethernet II accordion, all the 0 are labelled as padding.

Ethernet requires that all packets be at least 60 bytes long (64 bytes if you include the Frame Check Sequence at the end), so if a packet is less than 60 bytes long (including the 14-byte Ethernet header), additional padding bytes have to be added to the end of the packet.

(Those padding bytes will not show up on packets sent by the machine running Wireshark; the padding is added by the Ethernet hardware, and packets being sent by the machine capturing the traffic are given to the program before being handed to the hardware, so they haven't been padded.)

wireshark explanation

Share:
14,759
Trung Tran
Author by

Trung Tran

Updated on June 24, 2022

Comments

  • Trung Tran
    Trung Tran almost 2 years

    after ARP protocol in a frame, there are many 0 bytes. Does anyone know the reason for the existence of these 0 bytes? enter image description here