i am not sure if i understand your question: if your question is "does tcpdump indicate if an IPv4 packet is fragmented ?" then the answer is yes, we do display the offset and more-fragment header flags in verbose (-v) mode;
/hannes On Tue, Apr 26, 2005 at 11:01:09AM -0000, soumya r wrote: | Hello, | Could anyone please tell whether "tcpdump" produces an output of packets in 'fragmented' or 'defragmented' form? | Thanks | Soumya.- | This is the tcpdump-workers list. | Visit https://lists.sandelman.ca/ to unsubscribe. | - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.