Wednesday, February 13, 2019

Linux is sending a single pkt larger than 15KBytes

I see a single packet larger than 15KBytes on the wire. In a simple 3 node topology in a straightline.

NodeA<------ NodeB<--------NodeC

Traffic is flowing from NodeC to NodeA. Capture is done from egress side of NodeC and ingress side of NodeB.

wireshark is capturing over 15KBytes as displayed in the "Frame Length" field (I've disabled Tcp follow stream).

I could blame it on the NIC not following standards etc, but want to understand this a little more and ways to avoid it.

Reading online, there are some Large Send Offload settings that may trigger this. Has anyone seen pkts larger than 10K in their network?



No comments:

Post a Comment