It turns out that I should have changed the MTU of the "sending" interface. I
did that and I no longer get the warning messages.
Thank you for your help!
Regards,
Rayne
--- On Mon, 16/2/09, Aaron Turner <synfina...@gmail.com> wrote:
> From: Aaron Turner <synfina...@gmail.com>
> Subject: Re: [Tcpreplay-users] Error: Message too long
> To: "Main forum for tcpreplay" <tcpreplay-users@lists.sourceforge.net>
> Date: Monday, 16 February, 2009, 12:04 PM
> On Sun, Feb 15, 2009 at 6:30 PM, Rayne
> <lancer6...@yahoo.com> wrote:
> > Hi,
> >
> > I'm trying to replay traffic saved in a pcap file
> using tcpreplay 3.4.0 and I keep getting the warning
> messages:
> >
> > Warning: Unable to send packet: Error with PF_PACKET
> send() [277]: Message too long (errno=90)
> > Warning: Unable to send packet: Error with PF_PACKET
> send() [2237]: Message too long (errno=90)
> >
> > (and so on with other numbers in [...])
> >
> > I've set the MTU of my receiving interface to 1520
> bytes, and used tcpdump to verify that no packet in the pacp
> file is larger than that ("tcpdump -r FILENAME greater
> 1520" shows no output).
>
> I assume you meant "sending" interface.
>
> >
> > The numbers in the square brackets are the same
> everytime I run tcpreplay, so I'm assuming they mean the
> 277th packet, 2237th packet, etc.
>
> Yes.
>
> > What is wrong?
>
> Excellent question. No idea. My guess is either the said
> frames
> really are larger then 1520 or your network card isn't
> actually
> accepting the MTU change. Or maybe there is a Linux kernel
> bug. I'm
> not aware of any bugs that would cause this problem on
> Linux.
>
> I would use: tcpdump -r old.pcap -c 280 -w new.pcap
>
> And load up the new.pcap in wireshark or tcpdump to take a
> look at
> packet 277. Maybe it has a bunch of 802.1q vlan tags or
> ???
>
> --
> Aaron Turner
> http://synfin.net/
> http://tcpreplay.synfin.net/ - Pcap editing and replay
> tools for Unix & Windows
> Those who would give up essential Liberty, to purchase a
> little
> temporary Safety,
> deserve neither Liberty nor Safety.
> -- Benjamin Franklin
Get your preferred Email name!
Now you can @ymail.com and @rocketmail.com
http://mail.promotions.yahoo.com/newdomains/sg/
------------------------------------------------------------------------------
Open Source Business Conference (OSBC), March 24-25, 2009, San Francisco, CA
-OSBC tackles the biggest issue in open source: Open Sourcing the Enterprise
-Strategies to boost innovation and cut costs with open source participation
-Receive a $600 discount off the registration fee with the source code: SFAD
http://p.sf.net/sfu/XcvMzF8H
_______________________________________________
Tcpreplay-users mailing list
Tcpreplay-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
