Wireshark mailing list archives
Re: bad UDP reassembly
From: Graham Bloice <graham.bloice () trihedral com>
Date: Tue, 17 Oct 2017 16:43:39 +0100
On 17 October 2017 at 15:51, Deny IP Any Any <denyipanyany () gmail com> wrote:
I have a capture, which I believe shows a device fragmenting UDP packets and not setting the 'More Fragment's flags correctly. Wireshark reassembles the packets, but the 'length' column is not correct for this packet. I would expect Wireshark to show an error or indicate that there is something wrong with the packets, but it doesn't. Can I send this small capture to someone else to confirm? using wireshark 2.4.1 on Win64. -- deny ip any any (4393649193 matches)
The Wireshark Bugzilla is the place for that, where you can attach the capture to the item you raise: https://bugs.wireshark.org -- Graham Bloice
___________________________________________________________________________ Sent via: Wireshark-users mailing list <wireshark-users () wireshark org> Archives: https://www.wireshark.org/lists/wireshark-users Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-users mailto:wireshark-users-request () wireshark org?subject=unsubscribe
Current thread:
- bad UDP reassembly Deny IP Any Any (Oct 17)
- Re: bad UDP reassembly Graham Bloice (Oct 17)