From: free@securityaudit.val.newsbank.net   
      
   In article <2563u6-9le.ln1@news.rtij.nl>,   
   	Martijn Lievaart  writes:   
   > On Thu, 26 Nov 2009 09:10:35 -0800, Ashwin Rao wrote:   
   >   
   >> Data payloads with length greater than the MSS negotiated are being   
   >> exchanged. I would like to know under which conditions are payloads   
   >> greater than the MSS exchanged? Further, is there a way to limit the   
   >> payloads to the specified MSS value?   
   >   
   > I've seen this happening with NICs that do tcp offloading. In that case,   
   > the frame you see in tcpdump is NOT what goes over the wire, but what the   
   > OS send to the card. FWIW, this was on AIX.   
   >   
      
   The original post states that this occurred on the loopback device:   
      
   > The following traces are of a connection between a client and server   
   > running on the same machine. The connection is over a local loop   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)