I am using a Linux VM as a inline packet capture device. I have noticed when gathering the pCAPS the length of the frames are well beyond the physical link. I have disabled TCP Seg Offload/Large Segment Offload but still see frames reassembled and large in the pCAP.
Anyone doing something similar and able to see the frame size as the link size, not the reassembled packet?
No comments:
Post a Comment