I setup a erspan session with mtu 256 (truncates packets). Am i correct that wireshark will report the actual received data when giving throughput and packet size statistics ? (As opposed to look at info in ip/tcp header.( Does this mean i have to enable jumbo frames, and tunnel full packets using erspan to get a accurate picture ? asked 05 Dec '12, 05:40  diepes |
This is a static archive of our old Q&A Site.
Please post any new questions and answers at ask.wireshark.org.
