Subject: Re: "ping6 -M do" fragments packets

From: Patrick McHardy <[email-masked]>
Date: Fri, 12 Oct 2007 19:17:50 +0200

Chuck Anderson wrote:
> On Fri, Oct 12, 2007 at 06:00:12PM +0200, Patrick McHardy wrote:
> 
>>>>ping6 -M do -s 65527 www.kame.net
>>>
>>>Sure enough, wireshark reports fragments:
>>>
>>>No.     Time        Source                Destination           Protocol Info
>>>      1 0.000000    2001:468:616:8c9:213:72ff:fe74:da15 2001:200:0:8002:203:47ff:fea5:3085 IPv6     IPv6 fragment (nxt=ICMPv6 (0x3a) off=0 id=0x79)
>>>      2 0.000007    2001:468:616:8c9:213:72ff:fe74:da15 2001:200:0:8002:203:47ff:fea5:3085 IPv6     IPv6 fragment (nxt=ICMPv6 (0x3a) off=1448 id=0x79)
>>
>>Are you using nf_conntrack_ipv6?
> 
> 
> No:
> 
> [...]

Works for me:

$ ping6 -M do -s 65527 www.kame.net -n -c 1
PING www.kame.net(2001:200:0:8002:203:47ff:fea5:3085) 65527 data bytes
>>From 2001:6f8:974:0:21b:21ff:fe02:6fad icmp_seq=1 Packet too big: mtu=1500

--- www.kame.net ping statistics ---
0 packets transmitted, 0 received, +1 errors