1 | initial version |
Modern NICs and their drivers can handle many networking tasks and among them is segmentation offloading and this leads to the capture library recording these larger packets.
See the Wiki page on offloading for more info.
Incidentally yet another reason to not perform captures on the host systems themselves.