3 Sep 2002 21:36
RE: fragmented packets (was: Re: [ipfix-req] IPFIX Requirements Questions)
Carter Bullard <carter <at> qosient.com>
2002-09-03 19:36:48 GMT
2002-09-03 19:36:48 GMT
Gentle People, An unambiguous way of referring to the fragment most likely to contain flow identifying information is to refer to the "zero offset fragment". It is not correct to assume, however, that all the information needed to track a standard 5-tuple flow is in the zero offset fragment, as the algorithm allows fragmentation to occur within the TCP header. While there are RFC's that suggest that this should not be allowed, some routers still can fragment at the destination port field boundary. I believe that a paragraph that talks about fragmentation should mention that some reassembly may be required. Carter Carter Bullard QoSient, LLC 300 E. 56th Street Suite 18K New York, New York 10022 +1 212 588-9133 Phone +1 212 588-9134 Fax > -----Original Message----- > From: majordomo listserver > [mailto:majordomo <at> mil.doit.wisc.edu] On Behalf Of > calato <at> riverstonenet.com > Sent: Friday, August 30, 2002 10:14 AM(Continue reading)
RSS Feed