Hi, Your capture reassembles just fine when I tested it. The reassembled payload can be seen in packet 26 of your trace. Ethereal always displays/dissects the reassembled packet in teh final frame that completed reassembly so that the feature works well for tethereal as well as for ethereal.
----- Original Message ----- From: "Loïc Minier" Sent: Wednesday, July 30, 2003 6:08 PM Subject: [Ethereal-users] IP/UDP fragmented packet not reassembled properly > Good morning list, > > > I've met a strange capture which ethereal correctly sees as a MMSE > m-send-req. However, the MMSE is not reassembled properly. I believe > the problem is at the IP level, because it seems the Fragmented IP > packets aren't reassembled either. > I know it perfectly insane to send huge UDP packets that fragment > like this one, but the fragmenting seems to be done by the windows ppp > stack: the error is either in the UDP fragmenting scheme of windows in > ppp-connections or in ethereal no seing the beginning of a fragmented > packet. > > Any hints regarding the capture below would be greatly appreciated. I > reproduced the problem with multiple MMSE-m-send-req with MMS > 2 Kos. > > [ 31K capture is at <http://via.ecp.fr/~lool/ethereal/frag-ip-udp.bin> ] >
