Ethereal-users: [Ethereal-users] Need to capture fragmented packets

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Jeff Shafer <Jeffrey.Shafer@xxxxxxx>
Date: Mon, 13 Feb 2006 14:34:33 -0700
I've been working with Tethereal (command line version of Ethereal) to capture IP fragments, but I'm not seeing them. This seems odd since I can see them with Ethereal. For example, if I am observing a 32 KB block write on NFS on Ethereal, I can see all the 1514 byte packets which collectively contain the 32768 bytes of data. However, output from Tethereal just seems to show only one packet corresponding to this write: the last packet in the block, with offset equal to 32768. Can someone please explain why I'm not seeing the intermediate IP fragments, with offsets ranging from zero to 32768? And, can you please tell me how I can set Tethereal so that I can see them?
Thanks,
JDS