VSS Monitoring trailer messing up packet reassemble [closed]

Hi,

Did someone encountered reassemble issues when vss-monitoring trailer is appended to fragmented messages?

I have a DNP3 PCAP with different reassemble output after isolating (extract packets) specific DNP session including vss-monitoring trailer appended to one of the fragmented packets.

Thanks

igal.a's avatar
1
igal.a
asked 2019-08-04 07:24:54 +0000
edit flag offensive 0 remove flag reopen merge delete

Closed for the following reason "question is not relevant or outdated" by igal.a 2019-08-04 08:27:10 +0000

Comments

Found my problem. It is relating to fragment aging.A first DNP3 fragment exceed fragment aging and is removed from reassemble table.

igal.a's avatar igal.a (2019-08-04 08:25:35 +0000) edit
add a comment see more comments