Big sized packet problem on CSS 11501

[tevfik]

Hi,

I have CSS 11501 V7.50

When I sent to VIP IP bigsized packet (65k) I get no response.

First, I tested with ping.

I sent ping sized 1600. Request time out.

Then I sent ping sized 1473 request time out.

When I sent ping sized 1472 I can got request. (On WinXP)

This is for only test.

When come back to service;

I have a test application,sends http packets sized 65k. And there is no request from CSS. I check the CSS but there is no flows. I enabled :

ip-fragment max-assembled-size 65535

tcp-ip-fragment enabled

udp-ip-fragment enabled

ip-fragment min-fragment-size 64

But problem still exists.

[Gilles Dufour]

do you have a sniffer trace showing the problem.

That would help see exactly what you're doing and we can then try to replicate.

Thanks,

Gilles.

[tevfik]

I sniffed from client side. I get TCP CHECKSUM INCORRECT and few TCP retransmissions.

[Gilles Dufour]

what device is sending the checksum error ?

Can we see the trace ?

is the problem happening with a L7 content rules or L3/L4 ?

Thanks,

Gilles.

[tevfik]

I attached the trace output.