Luis,
Thanks for the quick reply. I filtered for ip.flags.mf==1 &&
ip.frag_offset==0. Nothing showed up. Does that mean for the packets
that I captured, none of them were fragmented?
Marty Browne
Allergy & Asthma Associates
281-874-0447
www.texallergy.com
This e-mail and any files transmitted with it are the property of
Allergy & Asthma Associates and/or its affiliates. This message is for
the sole use of the intended recipient(s) and may contain confidential
and privileged information. Any unauthorized review, use, disclosure,
dissemination, forwarding, printing, copying or distribution is
prohibited. If you are not the intended recipient, please contact the
sender by reply email and destroy all copies of the original message.
-----Original Message-----
From: ethereal-users-bounces@xxxxxxxxxxxx
[mailto:ethereal-users-bounces@xxxxxxxxxxxx] On Behalf Of LEGO
Sent: Wednesday, January 26, 2005 10:03 AM
To: Ethereal user support
Subject: Re: [Ethereal-users] Fragmented packets
On Wed, 26 Jan 2005 09:16:42 -0600, Marty Browne - IT
<mbrowne@xxxxxxxxxxxxxx> wrote:
> How can I use ethereal to see if I have fragemented packets on my LAN?
ip.flags.mf is set for frames that contain the not last fragment of
fragmented packets, ip.frag_ofsset is set for all those frames that
contain a fragment other than the first
> Is it possible to have fragmented packets originating from PCs on a
> LAN going to a server on the same switch?
Yes, for example a program can create udp packets larger than the MTU,
those are going to be fragmented to be transmitted.
L
_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users