F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

Thiyagu_163984's avatar
Thiyagu_163984
Icon for Nimbostratus rankNimbostratus
Nov 06, 2017

length of the packet as 1618 in wireshark

Hello All, I'm troubleshooting application connectivity issue on LB. When I tried telnet to the application VIP on LB it is working whereas when I tried to post the data using HTTP is not working. ...
application delivery
BIG-IP
Morten_Marstran's avatar
Morten_Marstran
Icon for Nimbostratus rankNimbostratus
Nov 06, 2017

Hi,

 

This is expected behaviour when you use Wireshark from an endpoint, and the client is running TCP segmentation offload (TSO). TSO offloads the dividing of data from the CPU to the NIC.

 

Basically, this means that Wireshark picks up the frames, before they go out on a network wire, and you will see the length of each packet before the data is divided.

 

There are a lot of articles on this, if you want to read more.

 

Just do a google search for the following: Wireshark shows network packet larger than MTU

 

Best regards,

 

Morten