Wireshark-users: [Wireshark-users] TCP fragmentation and wireshark
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Kevin Wilson <wkevils@xxxxxxxxx>
Date: Sat, 1 May 2010 09:02:49 +0300
Hello,
I want to use wireshark sniffer for analyzing TCP fragmented traffic.
  I had written a small TCP client-server app, which creates large
packets (over 20 K) and sends them.
When I tried to sniff the traffic with wireshark, I saw single
packets, and no sign of fragmentation
(like ip frag_offset field, or ip more fragments field).
(I know for sure that the PMTU between client and server is 1500.)

Any ideas why ? or maybe my application is not good and I can use
existing applications?

rgs,
Kevin