why I'm capturing packets larger than MTU size (1500 bytes) and how to send them by pcap_sendpacket()?

["Andriy Tylychko" <andriy.tylychko () gmail com>]

I capture network traffic on Debian 5 and 6 with libpcap v. 1.2.1 compiled
from sources. Then I send these traffic by pcap_sendpacket(). Sometimes
there're packets (both TCP and UDP) larger than default MTU size (1500
bytes). I cannot send these packets with error: "send error:
packetSendPacket failed". Found this post:
http://seclists.org/tcpdump/2007/q2/112 "[Patch] libpcap support for IP
fragment reassembly", but I didn't enable such reassemply.

 

How can I disable this reassempling?

 

Thanks,

Andrew

-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.