 | 1 | initial version |
First of all it looks like a traceroute with ICMP packets. And the ICMP packets are all to long. Indeed the combination (Do not Fragment and More Fragments) is an unallowed combination.
I would call it a misbehaviour of that stack, which has the packet fragmented.
https://crnetpackets.com/2015/08/29/a-short-story-about-the-ip-id-field/
