the default value for mtu (in hping) is 16 bytes!!! what does it mean? maybe hping (against the rfc) use the fragmentation on the IP __payload__ and not on the whole IP packet...what do you think? you can check this with wireshark! in fact i typed this hping line: hping -m 160 -d 140 -c 1 localhost so we have a IP DATAGRAM size = 140data+20ipheader+20tcpheader > MTU=160 but there isn't fragmentation (check it with wireshark) but ip datagram size is greater than mtu! So why there isn't fragmentation? because (i suppose) the fragmentation work only on the IP payload: IP paylaod = 140data + 20tcpheader = 160 = MTU => no fragmentation! what do you think? i'm pretty sure of what i say.... -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
