The root cause of this problem is found. It is because the MTU of the receiving
NIC is set to 9000, which is greater than 1500. Since some packets have
ethernet FCS and trailer, that makes the packet has a 1520 whole size. The
tcpreplay can not recognize the FCS and trailer in the IP packet end,
发给您的邮件内容如下
--
From: "Guy Harris"
To: tcpdump-workers@lists.tcpdump.org
Date: 2011-06-01 00:54:17
Subject:
On May 31, 2011, at 7:36 AM, mold2010 wrote:
> I have a problem about libpcap ring buffer. The p
Hi, All,
I have a problem about libpcap ring buffer. The problem is the packets captured
by libpcap1.1.1 which uses ring
buffer are truncated. The detail is as the following.
I have two machines. One is A, one is B. A and B are connected directly by
twisted pair with Giga Ethernet NICs.I
used
