Re: [Ethereal-users] confusion about TCP checksum calculation

["Ronnie Sahlberg" <sahlberg@xxxxxxxxxxxxxxxx>]

Hi,

>I can't figure out why changing the link layer headers causes the
>TCP checksum to change? Or is there a bug in the calculation
>somewhere?

TCP cheacksums are based on both the TCP layer as well as a IP pseudo
header.
The IP pseudo header contains some fileds as IP address and such.
Please see RFC793

If you change some fields in the IP layer, then the TCP checksum will also
be modified.