Re: ICMP and discard oversize frame



On Wednesday 31 October 2007 12:37:43 Eric Boudrand wrote:
Hello,

I am running a FreeBSD router with two ethernet cards. I have reduced
the MTU to 800 in order to generate ICMP packet "Fragmentation needed
but DF was set". I can find in log :

rl1: discard oversize frame (ether type 800 flag 3 len 875 > max 814)

But there is no ICMP sent. By default, is this feature disabled ? How
can I see these ICMP packets generated ?

It's discarded before IP processing, the kernel knows
nothing about the IPs involved in that packet(well,
actually ethernet frame). MTU must be set equally
across your link layer...

It *will* send a fragmentation needed message if a received
packet is to be forwarded to a link with smaller MTU, not
big enough for the packet... That's not the same case with
the one you've posted.

So, long story short, FreeBSD sends fragment. needed messages.
But, this is not the correct way to test such a situation.

HTH

Nikos

_______________________________________________
freebsd-questions@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscribe@xxxxxxxxxxx"



Relevant Pages

  • ICMP and discard oversize frame
    ... I am running a FreeBSD router with two ethernet cards. ... the MTU to 800 in order to generate ICMP packet "Fragmentation needed ...
    (freebsd-questions)
  • ICMP and discard oversize frame
    ... I am running a FreeBSD router with two ethernet cards. ... the MTU to 800 in order to generate ICMP packet "Fragmentation needed ...
    (comp.unix.bsd.freebsd.misc)
  • ICMP unreachable question
    ... I'm interested in a particular ICMP packet which seems to change the client ... / servers MTU size. ... Client initiates a connection with the server and starts to transmit data. ... Router sends the following packet back to the server ...
    (Pen-Test)
  • Re: pmtud problem
    ... Tom Judge wrote: ... gif vpn tunnel with a mtu of 1280 ... What we see is the packet never makes it to the freebsd 6.1 system. ... If so there is a bug in 6.1 where the IPSEC code that is responsible for populating the ICMP packet fields fails to set the MTU hint in the icmp packet. ...
    (freebsd-net)
  • Re: pmtud problem
    ... gif vpn tunnel with a mtu of 1280 ... feeding into a tun0 with a mtu of 1492. ... What we see is the packet never makes it to the freebsd 6.1 system. ... If so there is a bug in 6.1 where the IPSEC code that is responsible for populating the ICMP packet fields fails to set the MTU hint in the icmp packet. ...
    (freebsd-net)