<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<html><head><meta http-equiv="Content-Type" content="text/html; charset=us-ascii" /><meta name="Generator" content="MS Exchange Server version 14.02.5004.000" /><title>Tools to assemble fragments</title></head><body>Dnscap has an ip reassembler in it.<br><br><div class="gmail_quote">On May 18, 2016 9:50:27 AM GMT+03:00, RunxiaWan <wanrunxia@aliyun.com> wrote:<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<!-- Converted from text/rtf format -->
<p dir="LTR" align="JUSTIFY"><span lang="en-us"><font face="Calibri">Hi, everyone,</font></span></p>
<p dir="LTR" align="JUSTIFY"><span lang="en-us"><font face="Calibri">I am doing a data analysis work for the queries and responses captured in my recursive server. I find the DNS data has some fragments due to large DNS package</font><font face="Calibri"> and it is tricky to assemble them. Would anyone tell me any works of assembling IP layer fragments or any tools to parse DNS message from tcpdump/dnscap data?</font></span></p>
<br />
<br />
<p dir="LTR" align="JUSTIFY"><span lang="en-us"></span></p>
<p dir="LTR" align="JUSTIFY"><span lang="en-us"><font face="Calibri">Best</font></span></p>
<p dir="LTR" align="JUSTIFY"><span lang="en-us"><font face="Calibri">Runxia Wan</font></span></p>
<p dir="LTR"><span lang="en-us"></span><span lang="en-us"></span><span lang="zh-cn"><br />
<font color="#333333" size="2" face="宋体">---------------<br />
</font><font color="#333333" size="2" face="宋体">Runxia Wan(Brian)</font></span></p>
<p dir="LTR"><span lang="zh-cn"><font color="#333333" size="2" face="宋体">Research Engineer<br />
BII Lab</font></span></p>
<p dir="LTR"><span lang="zh-cn"><font color="#333333" size="2" face="宋体">Beijing Interne</font><font color="#333333" size="2" face="宋体">t Institute(BII)</font></span></p>
<p dir="LTR"><span lang="en-us"></span><a href="mailto:rxwan@biigroup.cn"><span lang="en-us"></span><span lang="en-us"><u></u></span><u><span lang="zh-cn"></span></u><u><span lang="zh-cn"><font color="#0000FF" size="2" face="宋体">rxwan@biigroup.cn</font></span></u><span lang="en-us"></span></a><span lang="en-us"></span><span lang="en-us"></span><span lang="zh-cn"></span></p>
<p style="margin-top: 2.5em; margin-bottom: 1em; border-bottom: 1px solid #000"></p><pre class="k9mail"><hr /><br />dns-operations mailing list<br />dns-operations@lists.dns-oarc.net<br /><a href="https://lists.dns-oarc.net/mailman/listinfo/dns-operations">https://lists.dns-oarc.net/mailman/listinfo/dns-operations</a><br />dns-jobs mailing list<br /><a href="https://lists.dns-oarc.net/mailman/listinfo/dns-jobs">https://lists.dns-oarc.net/mailman/listinfo/dns-jobs</a></pre></blockquote></div><br>
-- <br>
Sent from my Android device with K-9 Mail. Please excuse my brevity.</body></html>