Bad packet size when replaying pcap

[Conor McKiernan]

Hi all,

I'm trying to replay some traffic from a recorded pcap.
I get this error when trying to replay it:

Port 0 : *** Bad packet size provided: 11106. Should be between 14 and 9238

The packet is from TLS traffic I'm wondering if it is possible to get around this limit?

Thanks,

Conor

[hanoh haim]

try tcprewite to fix mtu so the maximum packet size would be 1500. I think you capture the pcap in a wrong way using  gro enabled so optimization of TCP segments was consolidated as one packet. 

Most nics are limited to 9K maximum packet size. 

If you have the ability to capture again, try to disable lro and gso and gro.

Thanks

Hanoh

[Conor McKiernan]

Disabled gro, captured again and it worked!

Thanks once again for the help