Uploaded image for project: 'JGroups'
  1. JGroups
  2. JGRP-2776

ParseMessages chokes on fragmented IP packets

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Minor Minor
    • 5.5
    • None
    • None
    • False
    • None
    • False

      When a tcpdump/tshark/wireshark PCAP file on UDP is parsed, ParseMessages cannot read IP packets that are the result of fragmentation of a UDP datagram that is larger than the MTU.
      The reason is that each data section of a fragmented IP packet has a 16 byte header before the real data starts.
      Perhaps we can instruct tcpdump to skip IP fragments and only capture UDP datagrams?

              rhn-engineering-bban Bela Ban
              rhn-engineering-bban Bela Ban
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated: