Wireshark fails to detect packets properly

[T-449]

Hi,

I was trying to monitor the packet transfer between client and server for PQ implementation of OpenVPN. But for some reason there are cases when Wireshark is unable to detect the correct message type specifically when there is fragmentation or when TLS1.2 is used. This happens irrespective of the underlying transport layer protocol.

If u take a look at the screenshots the message type should have been client hello for those messages. I can't even expand into the TLS layer because it fails to parse the data.

[planetf1]

@T-449 does enabling IP Reassembly in wireshark help ?

Obviously there are other potential discussion points about the particular network scenario, options to reduce chance of defragmentation etc.