Ethereal-users: Re: [Ethereal-users] unreassembled fragmented

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <gharris@xxxxxxxxx>
Date: Thu, 8 Jul 2004 21:53:08 -0700
On Thu, Jul 08, 2004 at 02:29:48PM -0400, Colao, Anthony wrote:
> Can Anyone tell me what an unreassembled fragmented packet is?

A packet containing a fragment that Ethereal didn't reassemble.

> What it is caused by?

A packet being fragmented (i.e., there's one protocol that contains
packets for another protocol, and the packet for the latter protocol
isn't contained inside one packet for the former protocol, it's split
between two or more packets for the former protocol) and the reassembly
option that would cause Ethereal to reassemble the packet not being
turned on.

There's no single reassembly option in Ethereal, so we'd have to know
what type of packet (NFS, SMB, whatever) it was in order to say what
option or options you'd have to turn on.