<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE>Message</TITLE>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.2900.3059" name=GENERATOR></HEAD>
<BODY>
<DIV><FONT face=Arial size=2><SPAN class=734023319-18042007>I have written code
to reassemble fragmented IP messages and I have a system that is generating
fragmented (Ethernet) messages which I can successfully capture using WireShark
(all fragments!). However my "packet_handler(...)" method never receives the
subsequent fragments, only ever the first (with "ip_header.flags" == 1 and
"ip_header.offset" == 0).</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=734023319-18042007></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=734023319-18042007>As an example every
time I enter the "packet_handler(...)" method the "ip_header.identification"
always increments by a value of 1. It is my understanding that fragmented IP
packets have the same "ip_header.identification" value so this can be used for
reassembling the complete message.</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=734023319-18042007></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=734023319-18042007>I feel like I'm
missing something obvious, do I need to 'request' the next fragment from the
WinPCap interface or should it arrive, at my "packet_handler(...)"
method, in sequence like it does in WireShark??</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV align=left>
<DIV align=left><FONT face=Arial size=2><STRONG>Sam
Fielden</STRONG></FONT></DIV>
<DIV align=left><FONT face=Arial size=1></FONT> </DIV>
<DIV align=left><FONT face=Arial size=1>Software Engineer</FONT></DIV>
<DIV align=left><FONT face=Arial size=1>Beca Applied Technologies
Ltd</FONT></DIV>
<DIV align=left><FONT face=Arial size=1>10001 Jack Finney Blvd</FONT></DIV>
<DIV align=left><FONT face=Arial size=1>Greenville, Texas, 75402</FONT></DIV>
<DIV align=left><FONT face=Arial size=1>Bldg. 208. CBN011</FONT></DIV>
<DIV align=left><FONT face=Arial size=1>Ph. (903) 457-4767</FONT></DIV>
<DIV align=left><FONT face=Arial size=1></FONT> </DIV>
<DIV align=left><FONT face=Arial size=2><EM>Only Bikers understand why dogs love
to stick their heads out car windows.</EM></FONT></DIV></DIV>
<DIV> </DIV></BODY></HTML>