Skip to content

Ethernet Frames

Published Updated 2 min read

An Ethernet frame is the unit of data sent over a wired network. Each frame has a fixed structure: a header identifying the sender and receiver, a payload, and a checksum. This guide walks through that structure field by field.

Anatomy of a frame

Fields in transmission order:

EtherType or length?

The 2 bytes after the MAC addresses depends on its value:

Almost all modern traffic uses an EtherType.

VLAN tags

An optional 4-byte field between the source MAC and EtherType marks the virtual LAN a frame belongs to. Switches use this to separate traffic on shared infrastructure, so tagged frames appear on most enterprise and data centre networks.

Jumbo frames

Some networks support payloads up to around 9000 bytes, well above the standard 1500-byte MTU. The larger size reduces per-byte overhead on high-throughput workloads — common in data centres and storage networks, rare on consumer ones.

Every device along the path must support it, or oversized frames are dropped.

Interactive explorer

Total: 458 bytes
Header: 14 bytes
Length: 444 bytes (802.3)
Byte map of the current frame in software order. Software view shows only the bytes the operating system delivers; the preamble and FCS are stripped by the NIC.
DST (6 bytes)DST0SRC (6 bytes)SRC6TYPE (2 bytes)TYPE12PAYLOAD (444 bytes)PAYLOAD14458
Preamble + SFD8 bytes · 64 bits

7 bytes of clock sync then 1 byte Start Frame Delimiter. Software doesn't see this.

10101010 10101010 10101010 10101010 10101010 10101010 10101010 10101011
Destination MAC6 bytes · 48 bits

Who the frame is addressed to

08:00:27:51:a9:71
Delivery
unicast
Assignment
globally unique
Source MAC6 bytes · 48 bits

Who sent the frame

dc:a6:32:be:75:c8
Delivery
unicast
Assignment
globally unique
Length2 bytes · 16 bits

Payload length in bytes (IEEE 802.3)

0x01bc
Length
444 bytes
Payload444 bytes · 3552 bits

The packet handed down from the layer above (IP, ARP, …)

5c 2b 18 ca 1b 6b 09 59 3d e9 63 eb 48 29 51 0e c6 67 ba 0a 91 20 af 16 a6 df 33 1d 0d d9 fa 03 39 7c e3 03 d7 85 7b 21 72 fb 80 da 91 ac ff a0 16 86 52 28 9c cb 38 b6 22 84 ae 2a 43 53 86 75 16 5f 44 f3 fc 74 f9 9a 2e 50 b1 19 24 21 20 62 fc c5 2b 83 79 9c ef 60 9b 20 72 8a 99 de fa f5 b4 d6 6d 23 b2 33 b9 02 53 a2 a8 a4 2f bf 9f ab 95 d9 bf 4e b1 e1 8e 42 0b 0e e1 c9 41 74 9e 82 30 6e a8 01 fe 5d d0 8a 49 ad 5a d1 db 13 f5 36 94 77 44 0b 03 30 1a 34 1b 66 da ce a0 88 5f cd a4 a4 3a 8e 11 a8 9f fd 4e 34 22 44 3f fd 42 c6 5c fe b2 37 71 f3 05 55 a6 27 72 12 e5 64 e5 9a 19 28 5e aa 79 a7 b8 1c c0 4d 11 99 36 9e 31 13 ba 3e 86 f2 1d b4 4e 9b a1 56 5c 29 3a 31 ac 40 51 a8 df fb d8 99 5a ae 24 b3 3e 8c e2 e3 c7 6f cb 09 36 09 6a 7e ff 12 71 13 d7 4d 46 1c 43 27 f2 d1 f7 33 6c 28 70 1f cd 77 25 0e 8c f6 dc 49 86 c3 ae 37 be f2 ad dc cb 2f 1b 99 73 88 36 20 d2 4a 09 2b 8a ee 52 2e cb 66 d2 10 2c 60 08 b2 5d 6b a5 37 0c f6 04 c7 52 12 7d 1d 6c 98 56 a0 50 65 c6 53 2c b1 5c a3 40 8d f3 c7 5c f2 d6 ea cb 56 69 17 39 e1 d5 31 fe 8a 7b 58 17 c8 a4 41 4b 44 58 cd 41 88 0c 59 df 7a fa de 96 ac 7a 3f 77 c7 2a 51 03 2d cb 55 c0 44 24 6b 71 b2 f6 67 d0 31 18 85 f4 ac 85 42 50 2c e2 a5 da 4c 35 c8 0e df 2a 70 26 23 ab 32 49 aa e0 93 1e 53 0f 77 49 1a 1b 6b fa 63 2e 3a 86 82 86 b4 4b a7 b4 35 29 a0 0a a2 15 4f 35 2a 0c 2a 83 96
FCS4 bytes · 32 bits

Frame Check Sequence, a CRC-32 checksum of the frame. Software doesn't see this.

e2 28 60 b0

References