Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 2175] Saving displayed packets will not save IP fragments

Date: Tue, 8 Jan 2008 14:22:35 +0000 (GMT)
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2175


sake@xxxxxxxxxx changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Severity|Normal                      |Enhancement
            Summary|jumbo packet                |Saving displayed packets
                   |filtering/export problem    |will not save IP fragments
                   |                            |other than the first one




------- Comment #2 from sake@xxxxxxxxxx  2008-01-08 14:22 GMT -------
Actually, your trace does not contain a jumbo frame. It contains a fragmented
ip packet. A jumbo frame is an ethernet frame that exceeds 1514 bytes (FCS
excluded) whereas all the ethernet-frames within your trace have a length less
or equal  1518 bytes.

When only displayed frames are saved, the IP-fragments not containing the
ip-headers will not be saved. This is a known limitation/bug/enhancement
request. I will leave this bug open with an altered Summary so that it will not
be forgotten. But I think it will not be solved quickly.


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.