Difference between revisions of "Wireshark does not show fragmented SIP packets"
From Kolmisoft Wiki
Jump to navigationJump to search
(Created page with "= The Problem= *Wireshark* does not show fragmented SIP packets (usually INVITE packets), it looks like this in the Wireshark interface: File:wireshark_reassemble_setting.png<br> <br><br> =The Solution = '''Disable''' (uncheck) 'Reassemble fragmented IP datagrams' option. The option is available under Edit --> Preferences --> Protocols --> IPv4 window File:wireshark_fragmented_pcap.png<br> With the option ''''Reassemble fragmented IP datagrams'''' disabled,...") |
|||
| (4 intermediate revisions by one other user not shown) | |||
| Line 1: | Line 1: | ||
= The Problem= | = The Problem= | ||
'''Wireshark''' does not show fragmented SIP packets (usually INVITE packets), it looks like this in the Wireshark interface: | |||
[[File: | [[File:wireshark_fragmented_pcap.png]]<br> | ||
<br><br> | <br><br> | ||
| Line 10: | Line 10: | ||
The option is available under Edit --> Preferences --> Protocols --> IPv4 window | The option is available under Edit --> Preferences --> Protocols --> IPv4 window | ||
[[File: | [[File:wireshark_reassemble_setting.png]]<br> | ||
With the option | With the option '''Reassemble fragmented IP datagrams''' disabled, Wireshark will display a fragmented SIP message | ||
[[File:wireshark_not_fragmented_pcap.png]]<br> | [[File:wireshark_not_fragmented_pcap.png]]<br> | ||
<br><br> | |||
=See also= | |||
* [[PCAP does not show LegB of a call]] | |||
Latest revision as of 14:27, 6 December 2022
The Problem
Wireshark does not show fragmented SIP packets (usually INVITE packets), it looks like this in the Wireshark interface:
The Solution
Disable (uncheck) 'Reassemble fragmented IP datagrams' option.
The option is available under Edit --> Preferences --> Protocols --> IPv4 window
With the option Reassemble fragmented IP datagrams disabled, Wireshark will display a fragmented SIP message
