<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<META NAME="Generator" CONTENT="MS Exchange Server version 14.02.5004.000">
<TITLE>Tools to assemble fragments</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->
<P DIR=LTR ALIGN=JUSTIFY><SPAN LANG="en-us"><FONT FACE="Calibri">Hi, everyone,</FONT></SPAN></P>
<P DIR=LTR ALIGN=JUSTIFY><SPAN LANG="en-us"><FONT FACE="Calibri">I am doing a data analysis work for the queries and responses captured in my recursive server. I find the DNS data has some fragments due to large DNS package</FONT><FONT FACE="Calibri"> and it is tricky to assemble them. Would anyone tell me any works of assembling IP layer fragments or any tools to parse DNS message from tcpdump/dnscap data?</FONT></SPAN></P>
<BR>
<BR>
<P DIR=LTR ALIGN=JUSTIFY><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR ALIGN=JUSTIFY><SPAN LANG="en-us"><FONT FACE="Calibri">Best</FONT></SPAN></P>
<P DIR=LTR ALIGN=JUSTIFY><SPAN LANG="en-us"><FONT FACE="Calibri">Runxia Wan</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="zh-cn"><BR>
<FONT COLOR="#333333" SIZE=2 FACE="宋体">---------------<BR>
</FONT><FONT COLOR="#333333" SIZE=2 FACE="宋体">Runxia Wan(Brian)</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="zh-cn"><FONT COLOR="#333333" SIZE=2 FACE="宋体">Research Engineer<BR>
BII Lab</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="zh-cn"><FONT COLOR="#333333" SIZE=2 FACE="宋体">Beijing Interne</FONT><FONT COLOR="#333333" SIZE=2 FACE="宋体">t Institute(BII)</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"></SPAN><A HREF="mailto:rxwan@biigroup.cn"><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><U></U></SPAN><U><SPAN LANG="zh-cn"></SPAN></U><U><SPAN LANG="zh-cn"><FONT COLOR="#0000FF" SIZE=2 FACE="宋体">rxwan@biigroup.cn</FONT></SPAN></U><SPAN LANG="en-us"></SPAN></A><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="zh-cn"></SPAN></P>
</BODY>
</HTML>