cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
348
Views
0
Helpful
1
Replies

Unreassambled packets

endpoint
Level 1
Level 1

Hello all

please check attached tcpdump; trying to troubleshoot communication between two hosts, not sure where to start.
Regards,

1 Reply 1

Sergei Vasilenko
Cisco Employee
Cisco Employee

Hello,

As per snoop file, the TCP packets sent from 10.23.44.62 to 10.23.205.11 are 8274 bytes (w/o ethernet FCS) in size at Layer2 and

has  DF-bit set in IP header (ip pdu size is 8260).

And the sniffer traces just cuptured/contains info for the headers (first 96 bytes), not full frames w payload.

So that's why the errors aboutt unreassambled pkts seen.

It could be setting of the sniffer application and/or netdr on PC were capture done.

From another sied, the DF bit is set for those big packets, which mean no fragmentation is allowed for them in transit.

So depending on the network topology and the settings on the transit devices/interfaces,

if some of them does not support such a big MTUs, they could just drop those frames on transit.

Thanks,

Sergey

Review Cisco Networking products for a $25 gift card