We're now a non-profit! Support open source packet analysis by making a donation.

Wireshark-users: Re: [Wireshark-users] Assembling of fragmented IP protocol packets

From: "Anders Broman" <a.broman@xxxxxxxxx>
Date: Tue, 24 Apr 2007 20:12:38 +0200
Hi,
>From what I can se there is no second fragment in the trace, hence no
reassembly.
Best regards
Anders

-----Ursprungligt meddelande-----
Från: wireshark-users-bounces@xxxxxxxxxxxxx
[mailto:wireshark-users-bounces@xxxxxxxxxxxxx] För Franz Edler
Skickat: den 24 april 2007 19:25
Till: 'Anders Broman (AL/EAB)'; 'Community support list for Wireshark'
Ämne: Re: [Wireshark-users] Assembling of fragmented IP protocol packets

> How about Edit->preferences->Protocols->IP Reassemble Fragmented IP
> datagrams = True ?

Thanks. This has an effect.
If IP Reassemble Fragmented IP datagrams = false (not checked) than the
packets are assembled, otherwise not.

I have attached a small tracefile with some fragmented packets (e.g. packet
No. 4).

Cheers
Franz