Wireshark-users: Re: [Wireshark-users] MTU - wireshark showing length longer than.
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Stephen Fisher <steve@xxxxxxxxxxxxxxxxxx>
Date: Wed, 25 Nov 2009 10:07:42 -0700

On Nov 25, 2009, at 9:27 AM, Ant Mitchell wrote:


What should I be looking at ?, how does the packet size get larger
than the MTU ?. A typical size is 8960 for several packets, then 17960
and 20456 and several inbetween.
The NICs may be doing segmentation offloading, which reassembles TCP Segments before passing it to the computer: 

  http://wiki.wireshark.org/CaptureSetup/Offloading


Steve