[nsp] ICMP: time exceeded (reassembly)

[Victor Sudakov]

Bulger, Tim wrote:
> 
> > Does it make any difference? As already stated, the tunnel carrier
> > packets are being fragmented, not the tunnel payload.
> 
> With GRE, the setting of the DF bit from the payload packet is carried
> over to the tunnel packet, 

I did not know that. Is it only with GRE or with cisco implementation
of ipencap too? 

> and as another poster pointed out, there are
> subtle differences in the handling of fragmentation between IPIP and
> GRE.  Based on all that you've said, it sounds as if there is some buggy
> behavior taking place somewhere as no fragmentation should be required
> in your environment.

-- 
Victor Sudakov,  VAS4-RIPE, VAS47-RIPN