Printer FriendlyEmail Article Link

Why is the value of IPv4 checksum always 0x0000, when I capture packets on Landslide?

Answer

When you use the capture on Landslide ports or interfaces, it is normal to see the captured packets with checksums of 0x0000. The checksum will be displayed as incorrect because it hasn't been calculated yet at the point where the capture happens internally in Landslide.

Once the packets exit Landslide ports (or interfaces) towards the System Under Test (SUT), the packets have the correct checksum. The best method would be to capture the packets on the wire, e.g. using a hub or a mirror port to capture the packets. It is the best way to confirm that the packets captured on the wire have the correct checksum.

 

Product : Landslide,Landslide Client