INFO: UDP Datagram Can Be Silently Discarded if Larger than MTU (233401)


The information in this article applies to:

  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Professional
  • Microsoft Windows NT Server 3.5
  • Microsoft Windows NT Server 3.51
  • Microsoft Windows NT Server 4.0
  • Microsoft Windows NT Server 4.0 SP4
  • Microsoft Windows NT Workstation 3.5
  • Microsoft Windows NT Workstation 3.51
  • Microsoft Windows NT Workstation 4.0
  • Microsoft Windows NT Workstation 4.0 SP4
  • Microsoft Windows 98
  • Microsoft Windows 95
This article was previously published under Q233401

SUMMARY

When a UDP datagram is larger than the MTU size of physical media and there is no ARP entry for the host it is sent to, Microsoft Windows TCP/IP implementation keeps only the last fragment of the UDP datagram sent to a given destination while waiting for an ARP reply. The rest of fragments are silently discarded.

For example, when a WinSock application attempts to send a single UDP datagram with 12501 bytes of data, the IP layer performs fragmentation and generates nine IP fragments on an Ethernet. The first eight fragments are discarded and only the last fragment is kept while waiting for an ARP reply. When the first ARP reply is received, only the last fragment is sent.

This behavior is by design and complies to Host Requirement RFC stating that ARP should save at least one packet.

MORE INFORMATION

To avoid the UDP packet drop:

  1. Send a smaller IP datagram than the MTU size before sending a large UDP datagram. This ensures the ARP cache is "primed" so that all IP fragments can be sent out without waiting for the ARP reply
  2. Increase ARP cache life by adjusting the following registry:

    Value: ArpCacheMinReferencedLife

    Key: Hkey_Local_Machine\System\CurrentControlSet\Services\
    \Tcpip\Parameters

The default is 600 seconds and it can be increased to FFFFFFFF(Hex) seconds.

REFERENCES

For more information about the ARP cache life, refer to the following
article:

166750: ARP Cache Entries May Not Time Out for 10 Minutes

Modification Type:MinorLast Reviewed:12/20/2004
Keywords:kbDSWNET2003Swept kbinfo kbIP kbWinsock KB233401
©2004 Microsoft Corporation. All rights reserved.