[Bridge] Re: Any way of knowing a packet's been defragmented

Henrik Nordstrom hno at marasystems.com
Thu Aug 5 06:10:42 PDT 2004

On Thu, 5 Aug 2004 bdschuym at pandora.be wrote:

> As Stephen explained, bridge ports of the same bridge device no longer 
> need to have the same mtu. So the bridge code needs to drop packets 
> (ARP, IP, whatever) that will be too long for the output port.

Eh.. I do not claim to be a bridge guru, but won't such bridge cause 
serious havoc on the network much like PMTU blackholes does?

You should either reject creating such bridge, or make sure to fragment 
packets including ICMP MUST FRAGMENT generation when not allowed (which 
requires an IP).


More information about the Bridge mailing list