Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] TCP retransmit, HTTP and web page not loading

From: "Frank Bulk" <frnkblk@xxxxxxxxx>
Date: Wed, 25 Jun 2008 11:52:32 -0500
What do you suspect is setting the "do not frag bit"?  I'd be interested if
the customer's PC(s) are doing that, their attached router, or something
between their router and the switch in your office.

Frank

-----Original Message-----
From: Steve Bertrand [mailto:steve@xxxxxxxxxx] 
Sent: Wednesday, June 25, 2008 11:24 AM
To: Gerald Combs
Cc: frnkblk@xxxxxxxxx; Community support list for Wireshark; mattr@xxxxxxxx
Subject: Re: [Wireshark-users] TCP retransmit, HTTP and web page not loading

Gerald Combs wrote:
> I think Frank might be on the right track here. Inbound packets from
> 206.191.131.51 max out at 1018 bytes. This seems suspiciously low.

Yup, and the 'do not frag' bit is set on the .css requests...arg.

Steve