Network Implementation Guide › Troubleshooting › Some Files and Emails are Not Captured › Does the Network Traffic Contain Jumbo Frames?

Previous Topic: Is the Volume of Network Traffic Too High?

Next Topic: Attachments in Forwarded Webmails:

Does the Network Traffic Contain Jumbo Frames?

Typically, these are Ethernet frames with over 1518 bytes of payload. These packets are not normally allowed onto the Internet and cannot be analyzed by the NBA, but are sometimes seen on corporate networks.

To check whether the NBA is seeing very large packets

  1. Generate a diagnostics file.
  2. From the resulting .gz file, extract stats.txt.
  3. Open status.txt and check the jumbo frame count.

    On Bivio 2000 appliances, check the ‘Rx, 1519-Max byte packets’ count.

    On Bivio 7000 appliances, check the ‘RxOversizeFrms’ count.

The screenshot below shows an extract from status.txt on a Bivio 2000 appliance. The jumbo frame count shows that the NBA is not seeing very large packets:

stats_text screenshot max bytes (annotated)

Example status.txt on Bivio 2000 appliance

1 Rx, 1519-Max byte packets.

More information:

Collect Diagnostic Data