Wireshark

  • Riverbed Technology
  • WinPcap
SHARKFEST '12 - Wireshark Developer and User Conference - June 24-27, 2012 - UC Berkeley, Clark Kerr Campus
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-users: [Wireshark-users] TCP fragmentation and wireshark

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: Kevin Wilson <wkevils@xxxxxxxxx>
Date: Sat, 1 May 2010 09:02:49 +0300

Hello,
I want to use wireshark sniffer for analyzing TCP fragmented traffic.
  I had written a small TCP client-server app, which creates large
packets (over 20 K) and sends them.
When I tried to sniff the traffic with wireshark, I saw single
packets, and no sign of fragmentation
(like ip frag_offset field, or ip more fragments field).
(I know for sure that the PMTU between client and server is 1500.)

Any ideas why ? or maybe my application is not good and I can use
existing applications?

rgs,
Kevin

  • Prev by Date: [Wireshark-users] Error while starting Wireshark 1.2.7
  • Previous by thread: [Wireshark-users] Error while starting Wireshark 1.2.7
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation