Difference between revisions of "Wireshark does not show fragmented SIP packets"

From Kolmisoft Wiki
Jump to navigationJump to search
 
(No difference)

Latest revision as of 14:27, 6 December 2022

The Problem

Wireshark does not show fragmented SIP packets (usually INVITE packets), it looks like this in the Wireshark interface:

Wireshark fragmented pcap.png



The Solution

Disable (uncheck) 'Reassemble fragmented IP datagrams' option.

The option is available under Edit --> Preferences --> Protocols --> IPv4 window

Wireshark reassemble setting.png

With the option Reassemble fragmented IP datagrams disabled, Wireshark will display a fragmented SIP message

Wireshark not fragmented pcap.png




See also