Re: [tcpdump-workers] Reassembly of fragmented UDP packets

2008-01-28 Thread Guy Harris
Alfred E. Heggestad wrote: I am wondering if there is a libpcap option to do automatic reassembly of UDP/IP packets inside the library? No. Libpcap is, by design and intent, a low-level library for capturing and sending raw link-layer packets. If not then I guess the solution is to implem

[tcpdump-workers] Reassembly of fragmented UDP packets

2008-01-28 Thread Alfred E. Heggestad
Hi I am using libpcap to sniff UDP packets in a production network, and analyse the content of certain UDP packets. Some of the UDP packets are larger than MTU, and split into two or more IP fragmented packets. I would like to receive the complete UDP packet in my application.. I am wondering i