


The preamble comprised of 64 bits of pulsating 0s and 1s to help in receiving interfaces synchronize.In addition to identifying the source and destination, each frame transmitted across the Ethernet comprises a preamble, type field, data field, and Cyclic Redundancy Check (CRC).Ethernet frame formats contain the physical source as well as the destination MAC addresses of the device.Ethernet frames are of varying length, with no frame lesser than 64 octets or greater than 1518 octets (header, data and CRC).The following points give you a brief about the various fields of a frame. A frame is consist of markers which depicts the start and end of the packet and addresses for sending and receiving.Ī particular example of a frame is the Ethernet frame. HTH - took me a while to figure out this dialog box.The term frame originated from networking specifically communication over serial lines where sender “frames” the data which is a collection of bits by adding special characters before and after the transmitted data.Ī Frame can be defined as a data unit used in Data Link layer.

The rest of the options are pretty self-expanatory. Again, personally, I'd like to see this option selected as the default. So to search there, you need to select the Packet Bytes radio button. But this ins't where your string is going to be found - you want to search inside the actual TCP data bytes inside the packet.

By default, the Find dialog box works searches for the string in the window containing the list of packets. Now that you have selected the String radio button, you need to pay attention to the Search In radio buttons. Anyway given your example, you want to to search for a String so you need to select that radio button and type in the search string. By default, the Find dialog box searches the Display Filter for the string you type in (personally, I'd like to see the options reversed so that String is selected by default). I'd just like to add that the Find dialog box can be easily mis-understood if you don't pay attention to the radio buttons that are selected by default.
