again: real packet size

[Justin Hopper <gus () gusalmighty com>]

Does no one have any ideas on the question I posed to the list a few
days ago?  The message is below.  If I'm asking the question in the
wrong place, please let me know where would be a better place.

--------------------
If a packet is fragmented, will the ip_len variable in the IP header
struct still be accurate?  Will ip_len hold the total size of the
unfragmented packet, or the size of just the packet fragment that came
in?

If it holds the total size of the packet, how can one track which
packets fragments belong to a particular packet?

Thanks for any help.
---------------------
-- 
Justin Hopper <gus () gusalmighty com>

-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:tcpdump-workers-request () tcpdump org?body=unsubscribe