(1) IP Fragmented Packets
Due to the fact that the “data” portion of an Ethernet datagram is at most 1500 bytes, if an IP datagram exceeds 1500 bytes, it needs to be segmented into multiple Ethernet packets for transmission.
When using the ping command, by default, it does not exceed 1500 bytes. Therefore, if you want to obtain IP fragmented packets, you need to specify the size of the ICMP packets to be sent.
For example: ping 192.168.0.1 -l 3000 specifies the packet size as 3000
(2) Analysis of IP Fragmented Packet Analysis
In this captured file, frames 123 and 678 constitute a complete ping packet, where 123 is a request packet, and 678 is a response packet.
1. Analyze the data packet of Frame 1
2. Analyze the data packet of Frame 2
3. Analyze the data packet of Frame 3
The analysis ends herehttps://cloud.tencent.com/developer/article/1995924
“`