Tcpdump The TCP packet caught exceeds the MTU and is not synchronized with the ACK frame serial number

Source: Internet
Author: User
Tags ack linux

Recently, using tcpdump to study and analyze TCP parameters, the results of the grab package under Linux at first made me wonder that Ubuntu and Debian had the same phenomenon on hand.

The specific is to catch the sender of the TCP data segment of the length of the regular change, and the receiver reply to receive the frame of the serial number and the sender is not synchronized, for example, the sender sent a serial number of 25:7,265, the receiver replied to the ACK is a serial number is 2921. And ACK confirmed after the serial number is in accordance with the law of increasing.

Looking for a while, or found the answer on the stackoverflow, because Linux opened the GSO (generic segmentation Offload) option, just turn this option off to get the tcpdump output back to normal. The specific steps are as follows

View system-related options

Ethtool-k eth0

Close GSO

Ethtool-k eth0 GSO off

Author: cnblogs Juejiang

More Wonderful content: http://www.bianceng.cn

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.