Uploaded image for project: 'JGroups'
  1. JGroups
  2. JGRP-2776

ParseMessages chokes on fragmented IP packets

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Minor Minor
    • 5.5
    • None
    • None
    • False
    • None
    • False

      When a tcpdump/tshark/wireshark PCAP file on UDP is parsed, ParseMessages cannot read IP packets that are the result of fragmentation of a UDP datagram that is larger than the MTU.
      The reason is that each data section of a fragmented IP packet has a 16 byte header before the real data starts.
      Perhaps we can instruct tcpdump to skip IP fragments and only capture UDP datagrams?

            rhn-engineering-bban Bela Ban
            rhn-engineering-bban Bela Ban
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: