Ethereal-users: [Ethereal-users] IP/UDP fragmented packet not reassembled properly

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Loïc Minier <lool+ethereal@xxxxxxxxxx>
Date: Wed, 30 Jul 2003 10:08:14 +0200
      Good morning list,


 I've met a strange capture which ethereal correctly sees as a MMSE
 m-send-req. However, the MMSE is not reassembled properly. I believe
 the problem is at the IP level, because it seems the Fragmented IP
 packets aren't reassembled either.
   I know it perfectly insane to send huge UDP packets that fragment
 like this one, but the fragmenting seems to be done by the windows ppp
 stack: the error is either in the UDP fragmenting scheme of windows in
 ppp-connections or in ethereal no seing the beginning of a fragmented
 packet.

   Any hints regarding the capture below would be greatly appreciated. I
 reproduced the problem with multiple MMSE-m-send-req with MMS > 2 Kos.

 [ 31K capture is at <http://via.ecp.fr/~lool/ethereal/frag-ip-udp.bin> ]


    Regards,

-- 
Lo�c Minier <lool@xxxxxxxx>