Comments on: Ping frame http://itknowledgeexchange.techtarget.com/itanswers/ping-frame-2/ Sat, 25 May 2013 10:29:47 +0000 hourly 1 By: Troy Tate http://itknowledgeexchange.techtarget.com/itanswers/ping-frame-2/#comment-61380 Troy Tate Wed, 25 Mar 2009 21:01:22 +0000 #comment-61380 I was doing the capture on the machine sending the packet. The packet decode shows that the data section is 2000 bytes – yet the frame size shows the 562 bytes. This is before the packet ever hits the wire. I hear what you are saying about fragmentation, but the decode on the sending station does not really show this. You would need to capture the packets between the 2 hosts to see the fragmentation actually happening.

]]> By: petkoa http://itknowledgeexchange.techtarget.com/itanswers/ping-frame-2/#comment-61289 petkoa Tue, 24 Mar 2009 15:50:35 +0000 #comment-61289 Hi,

Nothing wrong with your frames – link MTU (maximum transmission unit) is usually set to 1500 bytes for the Ethernet links. So, larger packet have to be fragmented accordingly. Your frames 14 (1514 B) and 15 (562 B) in fact correspond to a fragmented single 2000 bytes ICMP ping packet (2000 payload + n overhead…).

BR,

Petko

]]>