Well, yes you can. I just tried sending some fragmented packets and Wireshark reassembles them perfectly. It says just next to "Fragmented IP Protocol" "[Reassembled in frame #X]". And saving it seems to work just like with any other packet. Or what is the problem?
On Mon, 8 Jan 2007 20:14:36 +0200, "Kaplan, Irine" <[EMAIL PROTECTED]> said: > > Hello, > > > > Can I use the Wireshark for IP fragments reassembling? I mean, can it > save reassembled frame, not only display reassembled data? > > > > Thank you, > > Irine. > > > > __________________________________________________________________________________________ > This electronic message contains information from Verint Systems, which > may be privileged and confidential. > The information is intended to be for the use of the individual(s)or > entity named above. > If you are not the intended recipient, be aware that any disclosure, > copying, distribution or use of the contents of this information is > prohibited. > If you have received this electronic message in error, please notify us > by replying to this email (1). -- Hans Nilsson [EMAIL PROTECTED] -- http://www.fastmail.fm - Same, same, but differentÂ… _______________________________________________ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users
