topic Big sized packet problem on CSS 11501 in Application Networking

Big sized packet problem on CSS 11501

tevfik — Mon, 26 Dec 2005 12:20:50 GMT

Hi,

I have CSS 11501 V7.50

When I sent to VIP IP bigsized packet (65k) I get no response.

First, I tested with ping.

I sent ping sized 1600. Request time out.

Then I sent ping sized 1473 request time out.

When I sent ping sized 1472 I can got request. (On WinXP)

This is for only test.

When come back to service;

I have a test application,sends http packets sized 65k. And there is no request from CSS. I check the CSS but there is no flows. I enabled :

ip-fragment max-assembled-size 65535

tcp-ip-fragment enabled

udp-ip-fragment enabled

ip-fragment min-fragment-size 64

But problem still exists.

Gilles Dufour — Tue, 27 Dec 2005 09:54:05 GMT

do you have a sniffer trace showing the problem.

That would help see exactly what you're doing and we can then try to replicate.

Thanks,

Gilles.

tevfik — Tue, 27 Dec 2005 12:23:31 GMT

I sniffed from client side. I get TCP CHECKSUM INCORRECT and few TCP retransmissions.

Gilles Dufour — Tue, 27 Dec 2005 13:30:55 GMT

what device is sending the checksum error ?

Can we see the trace ?

is the problem happening with a L7 content rules or L3/L4 ?

Thanks,

Gilles.

tevfik — Tue, 27 Dec 2005 13:59:08 GMT

I attached the trace output.