Difference between revisions of "Wireshark does not show fragmented SIP packets"
From Kolmisoft Wiki
Jump to navigationJump to search
| Line 12: | Line 12: | ||
[[File:wireshark_reassemble_setting.png]]<br> | [[File:wireshark_reassemble_setting.png]]<br> | ||
With the option '''Reassemble fragmented IP datagrams | With the option '''Reassemble fragmented IP datagrams''' disabled, Wireshark will display a fragmented SIP message | ||
[[File:wireshark_not_fragmented_pcap.png]]<br> | [[File:wireshark_not_fragmented_pcap.png]]<br> | ||
Revision as of 08:41, 6 December 2022
The Problem
Wireshark does not show fragmented SIP packets (usually INVITE packets), it looks like this in the Wireshark interface:
The Solution
Disable (uncheck) 'Reassemble fragmented IP datagrams' option.
The option is available under Edit --> Preferences --> Protocols --> IPv4 window
With the option Reassemble fragmented IP datagrams disabled, Wireshark will display a fragmented SIP message
