Ethereal-users: Re: [Ethereal-users] IP/UDP fragmented packet not reassembled properly

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: "Ronnie Sahlberg" <ronnie_sahlberg@xxxxxxxxxxxxxx>
Date: Wed, 30 Jul 2003 19:54:32 +1000
Hi,

Your capture reassembles just fine when I tested it.
The reassembled payload can be seen in packet 26 of your trace.
Ethereal always displays/dissects the reassembled packet in teh final frame
that completed reassembly
so that the feature works well for tethereal as well as for ethereal.


----- Original Message -----
From: "Lo�c Minier"
Sent: Wednesday, July 30, 2003 6:08 PM
Subject: [Ethereal-users] IP/UDP fragmented packet not reassembled properly


>       Good morning list,
>
>
>  I've met a strange capture which ethereal correctly sees as a MMSE
>  m-send-req. However, the MMSE is not reassembled properly. I believe
>  the problem is at the IP level, because it seems the Fragmented IP
>  packets aren't reassembled either.
>    I know it perfectly insane to send huge UDP packets that fragment
>  like this one, but the fragmenting seems to be done by the windows ppp
>  stack: the error is either in the UDP fragmenting scheme of windows in
>  ppp-connections or in ethereal no seing the beginning of a fragmented
>  packet.
>
>    Any hints regarding the capture below would be greatly appreciated. I
>  reproduced the problem with multiple MMSE-m-send-req with MMS > 2 Kos.
>
>  [ 31K capture is at <http://via.ecp.fr/~lool/ethereal/frag-ip-udp.bin> ]
>