I have capture taken from a CentOS 7 VM where several TCP packets show an incorrect checksum possibly caused by "TCP checksum offloading".
There is an unusually high volume of these packets (73) for it be legitimate it seems. The value of this field is not zero however.
My question is when TCP checksum offloading occurs, should this value be zeroed? If not, any ideas what happened here?
