-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I think the question is:
Does libpcap do IP defragmentation of fragmented packets? In which case the answer is, no. The packets are unmodified from how they are recieved off the wire. - -Aaron On Tue, Apr 26, 2005 at 02:28:22PM +0200, Hannes Gredler wrote: > i am not sure if i understand your question: if your question is > "does tcpdump indicate if an IPv4 packet is fragmented ?" then > the answer is yes, we do display the offset and more-fragment > header flags in verbose (-v) mode; > > /hannes > > On Tue, Apr 26, 2005 at 11:01:09AM -0000, soumya r wrote: > | Hello, > | Could anyone please tell whether "tcpdump" produces an output of packets > in 'fragmented' or 'defragmented' form? > | Thanks > | Soumya.- -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (GNU/Linux) Comment: Public key at: http://www.synfin.net/aturner/pgpkey.asc iD8DBQFCbmPFhweYF/hu2uYRAg0wAJ93kgRhvd7rqOkmcD0zLcg7kAV0+QCfYFNW To07Zbj1iv1bVFwq5Dp9xH8= =ydA3 -----END PGP SIGNATURE----- - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.
