On Thu, 14 Aug 2014 13:35:48 -0500 Les Mikesell wrote: > I thought NFS defaulted to writing 8192 blocks and let the network > stack fragment as needed I think it is those fragments I'm looking at in wireshark. I just did another experiment - If I mount the same NFS filesystem on the centos 7 host, and do the same "ls" command, it works perfectly and the wireshark trace shows the same 1516 capture length for the NFS readdir messages. Somehow it is just the idea of forwarding the UDP packets to the virtual machine that the host objects to. The exact same size packets destined for it to use directly have no problems.