Frame Size and Wireshark

Frame Size and Wireshark


This blog is a write up of what was discussed at our first AMA session:

https://www.youtube.com/watch?v=TM70jXEsFsk


In Wireshark, when you look at the frame sizes, by viewing the “Length” field, it reports a number to you. This is the frame length. You can view this by looking under the Frame section of Wireshark.

You can of course add this as a column in Wireshark.

Well, it’s lying to you. Everyone knows that ACKs are 14 Bytes, not 70!


What? Why? How?...


Well, this is actually quite simple. Wireshark is reporting the size of the frame, INCLUDING the radiotap header.


The radiotap header is added by the capturing device, and it gives you all sort of information about the frame when it was captured.


Different capturing devices, and software, do this differently. While there are standard formats for storing this information, different applications will do this differently. Also, it depends on which protocol you are capturing. So, essentially, different protocols have different frame sizes based on information that different applications store!!!


So, a capture made with one capturing device, may use different frame sizes than a capture made on a different tool. Also, these numbers depend on what protocol is being captured 802.11n, ac, ax, or be, etc.


This number is essentially the frame size in the pcap file, including the radiotap header.


Can you turn this off, or adjust it?


Simple answer: NO!


However, there is a little trick you can do, and that is to display the radiotap header size next to the length.


Simply add the Radiotap Header > Header Length as a column, and you can see what you need to see!


Then you can do a quick math sum, and work out the real size of the frame!

70-56 = 14 just like it should be!

See you next time!

===


 #General #WiFi #WirelessFrames #Wireshark 



===

About NC-Expert

NC-Expert is a privately-held California corporation and is well established within the Wireless, Security, and Collaboration industry certification training, courseware development, and consulting markets.

Led by its Founder and CEO, Rie Vainstein, NC-Expert has won numerous private contracts with Fortune level companies around the world. These customers have depended on NC-Expert to train, advise, and mentor their staff.

So remember, if you are looking for the best IT training just call us at (855) 941-2121 or contact us

NC-Expert Blog

January 5, 2026
Nice to Have vs. Essential Empty heading Empty heading Wireless networking is no longer a “nice to have” skill... it’s mission-critical. From healthcare and education to enterprise, manufacturing, and public safety, organizations depend on reliable, secure, and high-performing Wi-Fi. As a result, employers are looking for professionals who don’t just know Wi-Fi, but understand how to design, deploy, secure, and troubleshoot it effectively. Empty heading pty heading So, what specific skills are employers looking for, and how can professionals demonstrate they have them?  Below are the top 10 Wi-Fi skills in demand today, and how CWNP® (Certified Wireless Network Professional) training helps deliver each one.
CWNP vs CompTIA Network+
By Admin August 15, 2025
For early-career engineers determining a career path can be confusing.
By Rie Vainstein July 4, 2025
Connecting the Dots? Wi-Fi Sensing just hit the headlines in a big way, reportedly as the latest technological invasion into our lives. Many people were horrified about the threat of being spied on in their own homes. In this blog, we investigate the reality of the technology and determine how far the “Big Brother” myth actually goes. Phrases like, “Your Wi-Fi can detect movement,” can strike fear into the heart, that our every move is being watched and tracked... but is it really as bad as it seems? What is Wi-Fi Sensing? Wi-Fi Sensing uses the Radio Frequency (RF) signals that are already being transmitted by Wi-Fi devices. When these signals propagate through space, they interact with everything in the environment: people, pets, furniture, walls, etc.