Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] Understanding offset values settings icmp

From: Pascal Quantin <pascal.quantin@xxxxxxxxx>
Date: Fri, 28 Aug 2015 10:16:36 +0200
2015-08-28 9:35 GMT+02:00 asad <a.alii85@xxxxxxxxx>:
Sorry, for missing file attachment.

Hi Asad,

Best regards,
Pascal.


On 8/28/15, asad <a.alii85@xxxxxxxxx> wrote:
> Hello,
>
> A certain wireshark sample for icmp fragmentation (attached) is
> showing following :-
>
> -fragment offset:13bits
> -offset value ordering as :-
>         - 0
>         - 1480
>         - 2960
>
> -length 1518.
>
> From , theory I know usual 8 bits of offset field will start
> calculating offset from 0, then for 1400 bytes of data (minus the
> headers) next value be 1400/8. If I apply same concept to attached
> pcap It doesn't add up. Why offset values so different even when
> considering 1500 bytes of data.
>
> Thanks.
>

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    https://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe