I'm trying to understand IP fragmentation and reassembly processes well. I found this example on the Internet that I guess would be useful to understand the topic.
Suppose a certain computer recieves the following sequence of datagrams (the columns in English would be: Source IP address, ID, MF, DF, Offset, Total Length, Protocol):
I believe 5 original un-fragmented datagrams were sent:
- ID 454, IP 188.8.131.52 (entries 1, 2, 7)
- ID 630, IP 245.36.22.141 (entries 6, 11, 13)
- ID 43, IP 184.108.40.206 (entries 3, 4, 5, 8)
- ID 44, IP 220.127.116.11 (entries 10, 12)
- ID 43, IP 18.104.22.168 (entry 9)
My analysis has been the following:
- I think the second fragment of this datagram was lost, so it will be discarded (the fragment with the least offset has an offset of 368*8 = 2944 bytes, but the first fragment has only 1472 bytes of data, so something in the middle was lost).
- This datagram is reassembled correctly, as all three fragments were recieved and the offsets assort. The complete datagram would be reassembled using fragments 6, 11 and 13, in that order.
- This datagram is also discarded, because at least two fragments were lost (there is no fragment with MF = 0 and there is no fragment with offset = 184, so the second one was also lost).
- This one is correctly reassembled, using fragments 10 and 12, in that order.
- Only a single fragment is recieved, and it has offset, so the first fragment was lost and the datagram will be discarded.
So I have three questions:
- Is the analysis made above correct? Is there any mistake you can spot?
- I noticed that in the 5th fragment recieved, the total lenght is less than for the rest (and is not the last fragment), so I believe that fragmentation took place in the middle of the path. How would the reassembly process work in this case? I'm not sure what the offset field would be, as now there would be sub-fragmented datagrams, and that confuses me big time.
- IP level of the computer would pass the information recieved to the UDP level. In those cases in which fragments are lost, is the IP level the one responsible for discarding the fragments related to the same uncomplete datagram, or does it pass this informaton to the UDP level and this is the one that discards them?