ip fragmentation....

[raj.aprilfool]

..... i'm using libpcap for capturing packets..... but i never got any fragmented packet... even when i used the libipq that time also i never came to see any fragemented ip datagram......

first i thought my NAT would be reassembling all the fragements for me.... so then i tried running the program on a machine that it is directly connected to internet.... i.e. machine with public IP address... [using company resources ], but the result was the same....
..my second thought was my kernel is somehow givin me reassembled packet...... but then i saw code inside snort for ip packet flag checking... sp_ip_fragbits.c
.... so i'm mistaking somewhere in concepts..... could anyone plz explain me the process...

[raj.aprilfool]

anyone......... plz..