Wireshark-users: Re: [Wireshark-users] Using Wireshark for IP fragments reassembling

From: "Hans Nilsson" <hasse_gg@xxxxxxxx>
Date: Mon, 08 Jan 2007 20:09:57 -1100

Well, yes you can. I just tried sending some fragmented packets and
Wireshark reassembles them perfectly. It says just next to "Fragmented
IP Protocol" "[Reassembled in frame #X]". And saving it seems to work
just like with any other packet. Or what is the problem?


On Mon, 8 Jan 2007 20:14:36 +0200, "Kaplan, Irine"
<Irine.Kaplan@xxxxxxxxxx> said:
> 
> Hello,
> 
>  
> 
> Can I use the Wireshark for IP fragments reassembling? I mean, can it
> save reassembled frame, not only display reassembled data?
> 
>  
> 
> Thank you,
> 
> Irine.
> 
> 
> 
> __________________________________________________________________________________________
> This electronic message contains information from Verint Systems, which
> may be privileged and confidential. 
> The information is intended to be for the use of the individual(s)or
> entity named above. 
> If you are not the intended recipient, be aware that any disclosure,
> copying, distribution or use of the contents of this information is
> prohibited. 
> If you have received this electronic message in error, please notify us
> by replying to this email (1).
-- 
  Hans Nilsson
  hasse_gg@xxxxxxxx

-- 
http://www.fastmail.fm - Same, same, but different…