Wireshark mailing list archives

bad UDP reassembly


From: Deny IP Any Any <denyipanyany () gmail com>
Date: Tue, 17 Oct 2017 10:51:05 -0400

I have a capture, which I believe shows a device fragmenting UDP packets
and not setting the 'More Fragment's flags correctly. Wireshark reassembles
the packets, but the 'length' column is not correct for this packet.

I would expect Wireshark to show an error or indicate that there is
something wrong with the packets, but it doesn't. Can I send this small
capture to someone else to confirm?

using wireshark 2.4.1 on Win64.

-- 
deny ip any any (4393649193 matches)
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe

Current thread: