[nsp] ICMP: time exceeded (reassembly)

[Dmitry Volkov]

> -----Original Message-----
> From: Bulger, Tim [mailto:TBulger at ea.com]
> Sent: Wednesday, February 04, 2004 1:18 AM
> To: Victor Sudakov; Dmitry Volkov
> Cc: Bulger, Tim; cisco-nsp at puck.nether.net
> Subject: RE: [nsp] ICMP: time exceeded (reassembly)
> 
> 
> 
> > Does it make any difference? As already stated, the tunnel carrier
> > packets are being fragmented, not the tunnel payload.
> 
> With GRE, the setting of the DF bit from the payload packet is carried
> over to the tunnel packet, and as another poster pointed out, 


DF bit is not copied from original header to GRE header
http://www.cisco.com/en/US/tech/tk827/tk369/technologies_tech_note09186a0080
093f1f.shtml#furthersolutions


> there are
> subtle differences in the handling of fragmentation between IPIP and
> GRE.  Based on all that you've said, it sounds as if there is 
> some buggy
> behavior taking place somewhere as no fragmentation should be required
> in your environment.
> 
> Good Luck 
> Tim