Well, yes you can. I just tried sending some fragmented packets and
Wireshark reassembles them perfectly. It says just next to "Fragmented
IP Protocol" "[Reassembled in frame #X]". And saving it seems to work
just like with any other packet. Or what is the problem?
On Mon, 8 Jan 2007 20:14:36 +0200, "Kaplan, Irine"
<Irine.Kaplan@xxxxxxxxxx> said:
>
> Hello,
>
>
>
> Can I use the Wireshark for IP fragments reassembling? I mean, can it
> save reassembled frame, not only display reassembled data?
>
>
>
> Thank you,
>
> Irine.
>
>
>
> __________________________________________________________________________________________
> This electronic message contains information from Verint Systems, which
> may be privileged and confidential.
> The information is intended to be for the use of the individual(s)or
> entity named above.
> If you are not the intended recipient, be aware that any disclosure,
> copying, distribution or use of the contents of this information is
> prohibited.
> If you have received this electronic message in error, please notify us
> by replying to this email (1).
--
Hans Nilsson
hasse_gg@xxxxxxxx
--
http://www.fastmail.fm - Same, same, but different
