Re: [tcpdump-workers] Re: [tcpdump-workers]libpcap1.1.1 truncates UDP

2011-06-06 Thread Aaron Turner
2011/6/6 mold2010 : > The root cause of this problem is found. It is because the MTU of the > receiving NIC is set to 9000, which is greater than 1500. Since some packets > have ethernet FCS and trailer, that makes the packet has a 1520 whole size. > The tcpreplay can not recognize the FCS and t

[tcpdump-workers] Re: [tcpdump-workers]libpcap1.1.1 truncates UDP payload, ring buffer problem?

2011-06-06 Thread mold2010
The root cause of this problem is found. It is because the MTU of the receiving NIC is set to 9000, which is greater than 1500. Since some packets have ethernet FCS and trailer, that makes the packet has a 1520 whole size. The tcpreplay can not recognize the FCS and trailer in the IP packet end,