Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version
  1. This looks to be a duplicate of https://ask.wireshark.org/question/12124/what-type-of-attack-is-this/ which includes a link to the pcap.
  2. The wikipedia entry is pretty good describing the attack types: https://en.wikipedia.org/wiki/IP_fragmentation_attack
  3. "ID of ping does not match ID of fragment": you're confusing the IP header Identification with the ICMP request Identifier.