Ethereal-users: [Ethereal-users] IP/UDP fragmented packet not reassembled properly

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Loïc Minier <lool+ethereal@xxxxxxxxxx>
Date: Wed, 30 Jul 2003 10:08:14 +0200
      Good morning list,


 I've met a strange capture which ethereal correctly sees as a MMSE
 m-send-req. However, the MMSE is not reassembled properly. I believe
 the problem is at the IP level, because it seems the Fragmented IP
 packets aren't reassembled either.
   I know it perfectly insane to send huge UDP packets that fragment
 like this one, but the fragmenting seems to be done by the windows ppp
 stack: the error is either in the UDP fragmenting scheme of windows in
 ppp-connections or in ethereal no seing the beginning of a fragmented
 packet.

   Any hints regarding the capture below would be greatly appreciated. I
 reproduced the problem with multiple MMSE-m-send-req with MMS > 2 Kos.

 [ 31K capture is at <http://via.ecp.fr/~lool/ethereal/frag-ip-udp.bin> ]


    Regards,

-- 
Loïc Minier <lool@xxxxxxxx>