Hi Lothar, Thank you for the pcap. It clears up the problem. I would re-confirm you ran tcpdump with the '-s 0' flag, as it's quite clear the packets are indeed truncated. Each frame is only 96 bytes total (14 bytes ethernet + 20 bytes IPv4 header + 8 bytes UDP header + 54 bytes data). However, according to the information in the headers, you should have 128 bytes of UDP data.
The result is of course is the packet is malformed and the IP stack is silently dropping them. Your best solution is to re-run tcpdump, making sure you're capturing the entire packet. Regards, Aaron -- Aaron Turner http://synfin.net/ ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ Tcpreplay-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
