How IP FRAGMENTATION Works

IP Fragmentation is an important feature to understand, especially many scanning tools use it to try to bypass Intrusion Detection Systems. Knowing how it works and how to spot it is important for all engineers and cybersecurity professionals, especially those going for certifications like the CCNA, Net+, CEH, PenTest+ or any other cyber cert.

====Download the pcap here ====

== More On-Demand Training from Chris ==

== Live Wireshark Training ==

== Private Wireshark Training ==

Timestamps:
0:00 Intro
1:06 IP Fragments Explained
1:50 Fragmentation Illustrated
3:36 Analyzing Oversize Pings
8:21 The "Do Not Fragment" Bit
10:05 Using Fragmentation with NMAP
14:52 IP Fragmentation Overvew

Hope this helps Packet People! Please like, share, subscribe!

[dirkl]

Good stuff Chris !!!! Keep them coming and much appreciated. It's good to review the basics from time to time.

[NarendraS]

Dude I could literally watch you whole day. Such a calm and smooth explanation

[herculesgixxer]

Chris, you never cease to explain anything with utmost clarity and precision. You inspire to learn more!

[LostBoi]

The fact that Chris thought "There might be someone who is interested in learning this, so let's make a video" in itself is great. Thank you so much Chris!

[billybuck]

Super quality video! I learned so much, I love that you show us the packets so we can see whats really going on. Its a great style of learning!

[kianooshmehrandish]

why I’m really finding you now? you’ve been here for 2 years and dumb me just found you, anyway you are awesome teacher keep up the great work❤

[Victorjude-qp]

I love your explanation, the practical with wireshark and tone of your voice... it really sinks in...

Thanks a lot

[MrKyubiSasuke]

Taking this class in college rn and the explanations weren’t getting through but this really helps a lot

[THEWolf-bzot]

thank you Chris for sharing all these staffs to help network engineers being in the riight direction !

[rubo]

Nice video, always enjoy the content you put out.

At 2:35, I think you made a mistake here. The 1500 byte packet gets split into a 1400 byte packet and a 120 byte packet (assuming we are talking about L3 inclusive of headers here).

[sharpestasset]

My hope is to one day be as good as you. Thank you so much for all the work you put into your vids. Great explanations.👍

[jodypetroni]

this was one of the best explanation videos ever! thanks Chris

[mustafaabdelfattah]

Thanks chris, i used to bypass fragmented packets in wireshark during analysis cause i couldnt understand it, you helped too much to change the idea of fragmentation complexity
Great vidio and explanation, thanks so much, really appaociated

[JoshKuo]

This is the best IP fragmentation explanation I have seen! Thank you for this excellent video which both my wife and I enjoyed :)

[ramzal]

Good one Chris...kudos for taking the time to record much.

[Manavetri]

excellent video. It shows that you have the concepts very well since you can describe them in an extremely simple way so that anyone can understand it... Thanks for the brilliant videos you have.

[sardaukar-yt]

They way you explain things is super clear. Thank you very much for sharing your knowledge you're amazing.

[rdp]

You're a legend Chris for sharing this info. It makes us understand Wireshark so much easier.

[venkatesh]

Thanks for the Clearly Explained Video Chirs I am following along with all your videos from Pluralsight.

[JuberPashaShaik]

This is awesome. The concept was explained in a very detailed manner and easy to understand. Hope we see more videos from you.