[Sake Blok <sake@xxxxxxxxxx>]

On Mon, Feb 20, 2006 at 02:29:57PM +0200, Amir Spivak wrote:
> When checking my network with ethereal, i notice that there is 1 machine 
> which is broadcasting a terrible amount of packages, like it sends 1 good
> UPD package followed by 10 IP 
> packages that look like this: FRAGMENTED IP PROTOCOL (proto=UDP 0x11,
> off=1480) 
> The device that is sending all these messages is an audio encoder made by
> smartsight(today Verint)

This is not a problem, this is normal IP-behaviour when a higher layer
protocol presents packets to the IP layer which can not be sent within
one packet. IP splits up the packet in multiple frames. In this proces
only the first frame has the UDP in t, that's why the other frames
look corrupted, while actially they are not.

Please take a look into the ip-header in ethereal, you will see the
more fragments bit being one, the identification being the same and
the offset increasing up till the last fragment. 
After that a new IP-packet is formed.

I hope this helps :)

CHeers,   Sake