 | 1 | initial version |
You have fragmented IP packets and are only exporting the final frame (as they are the marked ones) where the complete IP packet is reassembled and when you subsequent load that capture you only have the trailing IP fragments which can't be made into UDP datagrams.
To get the capture you require, set the display filter appropriately, e.g. udp.port == 5556 and then go to "Export Specified Packets..." and choose "All packets" and "Displayed" and you will get all the IP fragments.
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
