Marco Berizzi wrote:
Herbert Xu wrote:

Marco Berizzi <[EMAIL PROTECTED]> wrote:
>
> If I run 'ping 172.16.1.52 -M do -s 1472' from a 172.25.5.0
> host I got this result:
>
> PING 172.16.1.52 (172.16.1.52) 1472(1500) bytes of data.
> 1480 bytes from 172.16.1.52: icmp_seq=1 ttl=62 time=74.1 ms
> 1480 bytes from 172.16.1.52: icmp_seq=2 ttl=62 time=69.5 ms
> 1480 bytes from 172.16.1.52: icmp_seq=3 ttl=62 time=48.0 ms
>
> Is this a normal behaviour?

KLIPS may be fragmenting your packet.  A tcpdump will tell for sure.


Thanks a lot for the reply Herbert.
Is there a way to tell netkey to frag packets like klips
ignoring the DF bit?

If you pass '-M want'?

For the most part, ignoring DF is not a good idea.
http://www.psc.edu/~jheffner/drafts/draft-heffner-frag-harmful-XX.html

  -John
-
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to [EMAIL PROTECTED]
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to