Unreassambled packets

Unanswered Question
Feb 19th, 2010

Hello all

please check attached tcpdump; trying to troubleshoot communication between two hosts, not sure where to start.
Regards,

Attachment: 
I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Sergei Vasilenko Wed, 02/24/2010 - 02:38

Hello,

As per snoop file, the TCP packets sent from 10.23.44.62 to 10.23.205.11 are 8274 bytes (w/o ethernet FCS) in size at Layer2 and

has  DF-bit set in IP header (ip pdu size is 8260).

And the sniffer traces just cuptured/contains info for the headers (first 96 bytes), not full frames w payload.

So that's why the errors aboutt unreassambled pkts seen.

It could be setting of the sniffer application and/or netdr on PC were capture done.

From another sied, the DF bit is set for those big packets, which mean no fragmentation is allowed for them in transit.

So depending on the network topology and the settings on the transit devices/interfaces,

if some of them does not support such a big MTUs, they could just drop those frames on transit.

Thanks,

Sergey

Actions

This Discussion