Ethernet frames carry data between network devices using a structured format that includes MAC addresses, a type field, and an error-checking trailer. Understanding this frame structure is foundational to working with wired network communication.
Ethernet Frames
One of the most common protocols there is is Ethernet. And this is an Ethernet cable. In fact, I'm willing to bet that you have Ethernet running somewhere in your home. So let's look at Ethernet, and more specifically at the frames of Ethernet and how it transfers the payload back and forth between devices.
Here's an Ethernet network. In the middle of the Ethernet network, we have a hub. And then each of the devices have a NIC card on them that is an Ethernet NIC card — network interface card — and has a burned-in MAC address to it. So this is what Ethernet is. And what's being sent back and forth, the messages that are being sent back and forth, is called a frame.
When it comes to encapsulation, we add a header and possibly a trailer to add extra information on how to deliver the data, or the payload. So what does encapsulation look like specifically when we're talking about Ethernet? Well, we have that payload here. We do add a header to it, and we add a trailer in this case.
The header for Ethernet starts out with the MAC address. So that way, when it sends this message, whatever device is receiving it is going to take a look at that destination MAC address and say, does this belong to me? If not, I'm going to get rid of it. If it does belong, if it is the MAC address of the machine that's receiving it, then it'll say, oh, I'm going to process the rest of this. We also have the source MAC address, so that the device knows who this is coming from. So whoever sends this out is going to put their MAC address in the source.
Then we have this type field right here. The type field just essentially identifies what type of Ethernet frame this is. What is the payload going to be? What is the size of all of this? There's essentially two different types that can be found in here, but you can just think of it as identifying the size or the type of this whole Ethernet frame here.
And then we've got this frame check sequence at the end. This is just a double check to make sure that everything is accurate. Once the receiving device receives this, it will use this to verify that nothing's been changed or corrupted along the way.
If we were to put actual bits to it, we know that the MAC addresses are 48 bits, so these are each 48 bits. The type field is just 16 bits. The payload could be anywhere from 368 to 12,000 bits. And then the frame check sequence here at the end is 32 bits.
And what is an Ethernet frame? Well, this whole thing is the Ethernet frame. The payload, the header, the trailer — that's what we call the Ethernet frame.
TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.
Explore free tools and programs →