What steps will reproduce the problem?
1.Send UDP packet larger than 1500 MTU limit to instance with static ip.

2.Packet will be fragmented by "the network" as it gets NAT'd and delivered to the instance.

3.First fragment will arrive with "more fragments" flag set. No additional fragments arrive, and the TTL runs out, resulting in the instance returning a fragment reassembly time exceeded ICMP message back to the source.

What is the expected output? What do you see instead?
Additional fragments that have the same Packet ID should arrive at the instance if one arrives that has the "more fragments" flag set. Currently only the first fragment with offset 0 arrives.

What version of the product are you using? On what operating system?
OS: CentOS release 6.5 (Final)
Machine type: n1-standard-2 (2 vCPU, 7.5 GB memory)
Zone: us-central1-a
External IP: cbf-media-1 (23.236.59.200)
Internal IP: 10.240.217.75

Please provide any additional information below.
Initial Fragment Packet:

No. Time Source Destination Protocol Length Info
2 0.055924 216.115.69.144 10.240.217.75 IPv4 1514 Fragmented IP protocol (proto=UDP 17, off=0, ID=323b)

Frame 2: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits)
Ethernet II, Src: Google_dd:b6:2a (00:1a:11:dd:b6:2a), Dst: 42:01:0a:f0:d9:4b (42:01:0a:f0:d9:4b)
Internet Protocol Version 4, Src: 216.115.69.144 (216.115.69.144), Dst: 10.240.217.75 (10.240.217.75)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x60 (DSCP 0x18: Class Selector 3; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
Total Length: 1500
Identification: 0x323b (12859)
Flags: 0x01 (More Fragments)
Fragment offset: 0
Time to live: 52
Protocol: UDP (17)
Header checksum: 0x2c37 [validation disabled]
Source: 216.115.69.144 (216.115.69.144)
Destination: 10.240.217.75 (10.240.217.75)
[Source GeoIP: Unknown]
[Destination GeoIP: Unknown]
Data (1480 bytes)
------Data Truncated------

TTL Expires packet:

No. Time Source Destination Protocol Length Info
41 30.055838 10.240.217.75 216.115.69.144 ICMP 590 Time-to-live exceeded (Fragment reassembly time exceeded)

Frame 41: 590 bytes on wire (4720 bits), 590 bytes captured (4720 bits)
Ethernet II, Src: 42:01:0a:f0:d9:4b (42:01:0a:f0:d9:4b), Dst: 42:01:0a:f0:00:01 (42:01:0a:f0:00:01)
Internet Protocol Version 4, Src: 10.240.217.75 (10.240.217.75), Dst: 216.115.69.144 (216.115.69.144)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0xc0 (DSCP 0x30: Class Selector 6; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
Total Length: 576
Identification: 0x1a9d (6813)
Flags: 0x00
Fragment offset: 0
Time to live: 64
Protocol: ICMP (1)
Header checksum: 0x5b21 [validation disabled]
Source: 10.240.217.75 (10.240.217.75)
Destination: 216.115.69.144 (216.115.69.144)
[Source GeoIP: Unknown]
[Destination GeoIP: Unknown]
Internet Control Message Protocol
Type: 11 (Time-to-live exceeded)
Code: 1 (Fragment reassembly time exceeded)
Checksum: 0xefff [correct]
Internet Protocol Version 4, Src: 216.115.69.144 (216.115.69.144), Dst: 10.240.217.75 (10.240.217.75)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x60 (DSCP 0x18: Class Selector 3; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
Total Length: 1500
Identification: 0x323b (12859)
Flags: 0x01 (More Fragments)
Fragment offset: 0
Time to live: 52
Protocol: UDP (17)
Header checksum: 0x2c37 [validation disabled]
Source: 216.115.69.144 (216.115.69.144)
Destination: 10.240.217.75 (10.240.217.75)
[Source GeoIP: Unknown]
[Destination GeoIP: Unknown]
User Datagram Protocol, Src Port: sip (5060), Dst Port: sip (5060)
Session Initiation Protocol

Issue 35904565

Mentioned issues (1)

Links (5)

Issue metadata