 | 1 | initial version |
This is the effect of some offloading to the NIC in the ubuntu Laptop. With ethtool -k <interface> you can view all the offloading that is enabled. I usually disable all offloading on a laptop I am going to capture with. You can do that by using ethtool -K <interface> <feature> off for each enabled feature :-)
In this case I suspect the generic-receive-offload feature to be enabled and causing multiple packets to be reassembled on the NIC before being passed on up the stack where wireshark (libpcap) is able to capture them.
