[c-nsp] Debugging LFI fragmentation

Leonardo Souza nomeiodabalada at yahoo.com.br
Thu Aug 30 14:53:23 EDT 2007


Correct.
  I sent ping packets with 1500 bytes .
  My problem is that on the other side, I see no debug output for MLP (events, fragments etc...).
  By the way, it´s a C10K.
  It seems a bug. I dont know...
   
  Regards.

"Oliver Boehmer (oboehmer)" <oboehmer at cisco.com> escreveu:
  Leonardo Souza <> wrote on Thursday, August 30, 2007 4:23 PM:

> Hi mates.
> Maybe somebody can help me.
> I configured MLPoATM and LFI.
> According this debug, can I be sure both the routers are doing
> fragmentation? 
> 
> Router#
> *Mar 1 18:27:12.420: Vi3 MLP: I frag C0000041 size 49 encsize 2
> *Mar 1 18:27:12.420: Vi3 MLP: O frag C0000064 size 57 encsize 10
> *Mar 1 18:27:12.476: Vi3 MLP: I frag C0000042 size 48 encsize 2
> *Mar 1 18:27:12.564: Vi3 MLP: I frag C0000043 size 49 encsize 2
> *Mar 1 18:27:12.572: Vi3 MLP: O frag C0000065 size 57 encsize 10
> *Mar 1 18:27:12.864: Vi3 MLP: I frag C0000044 size 48 encsize 2
> *Mar 1 18:27:12.960: Vi3 MLP: I frag C0000045 size 50 encsize 2
> *Mar 1 18:27:12.968: Vi3 MLP: O frag C0000066 size 58 encsize 10
> 
> Does "I frag" stand for Input fragmented packet and "O frag" stand
> for Output fragmented packet? 

well, I frag means "input fragment". Whether this is actually a fragment
L3 packet cannot be deducted here, I think, any piece of data MLP sends
is a fragment.
In general, we don't fragment packets smaller than 84 bytes. 
Send a large ping packet (1000 bytes) and take a look at the debug..

oli


       Flickr agora em português. Você clica, todo mundo vê. Saiba mais.


More information about the cisco-nsp mailing list