tcpdump mailing list archives
Reassembly of fragmented UDP packets
From: "Alfred E. Heggestad" <aeh () db org>
Date: Mon, 28 Jan 2008 12:14:12 +0100
Hi I am using libpcap to sniff UDP packets in a production network, and analyse the content of certain UDP packets. Some of the UDP packets are larger than MTU, and split into two or more IP fragmented packets. I would like to receive the complete UDP packet in my application.. I am wondering if there is a libpcap option to do automatic reassembly of UDP/IP packets inside the library? If not then I guess the solution is to implement a reassembly algorithm in userspace. Many thanks in advance Best regards, Alfred - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.
Current thread:
- Reassembly of fragmented UDP packets Alfred E. Heggestad (Jan 28)
- Re: Reassembly of fragmented UDP packets Guy Harris (Jan 28)