[Dnsmasq-discuss] seeing www.ietf.org fail dnssec with dnsmasq rc7

[Dave Taht]

on a comcast native ipv6 connection, 1232 from OSX (ping6 -s 1232
2001:4860:4860::8888)

On the router *itself* I can't even

 ping6 -s 80 2001:4860:4860::8888

PING 2001:4860:4860::8888 (2001:4860:4860::8888): 80 data bytes

^C

--- 2001:4860:4860::8888 ping statistics ---

1 packets transmitted, 0 packets received, 100% packet loss

So i kind of suspected the -s calculation includes headers on one OS
or the other, or, I thought briefly, have a firewall rule in the way,
but weirdly
I can ping6 -s 4000 to snapon.lab.bufferbloat.net from the router
also. This makes no sense whatsoever.

sigh. We have a tool (isoburst) we keep meaning to polish up that
tests udp extensively, I guess we're going to have to add
fragmentation checks to it.



On Thu, May 7, 2015 at 6:32 AM, Toke Høiland-Jørgensen <toke at toke.dk> wrote:
> Simon Kelley <simon at thekelleys.org.uk> writes:
>
>> Using ping6 2001:4860:4860::8888 -s <packet size>
>>
>> (that's the Google public DNS server)
>>
>> I see answers up to packet size 1344.
>
> I get answers up to -s 1432. This is on an he.net tunnel.
>
> -Toke
>
> _______________________________________________
> Dnsmasq-discuss mailing list
> Dnsmasq-discuss at lists.thekelleys.org.uk
> http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss



-- 
Dave Täht
Open Networking needs **Open Source Hardware**

https://plus.google.com/u/0/+EricRaymond/posts/JqxCe2pFr67