Wireshark does not show fragmented SIP packets

From Kolmisoft Wiki
Revision as of 08:38, 6 December 2022 by Gilbertas (talk | contribs)
Jump to navigationJump to search

The Problem

Wireshark does not show fragmented SIP packets (usually INVITE packets), it looks like this in the Wireshark interface:

Wireshark reassemble setting.png



The Solution

Disable (uncheck) 'Reassemble fragmented IP datagrams' option.

The option is available under Edit --> Preferences --> Protocols --> IPv4 window

Wireshark fragmented pcap.png
With the option Reassemble fragmented IP datagrams' disabled, Wireshark will display a fragmented SIP message

Wireshark not fragmented pcap.png

Retrieved from "https://wiki.kolmisoft.com/index.php?title=Wireshark_does_not_show_fragmented_SIP_packets&oldid=28326"