Wireshark · Wireshark-users: Re: [Wireshark-users] Double frame

[Anders Broman <a.broman@xxxxxxxxxxxx>]

Your NIC might have "offloading" active see http://seclists.org/wireshark/2012/Jun/279
Regards
Anders

vincent paul skrev 2014-02-04 22:32:

Hi All,

I saw one TCP connection with MSS=1460 for both client and server.  However, sometimes wireshark shows packets with length above 2100 bytes sent from client.

OPNET analyser shows the same packet with 2100 bytes;  But its "Streamed Data viewer" said this packet (2100 bytes) consists of 2 frames.

Any explanation is greatly appreciated.

regards,

Paul

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe