Libpcap 是一个捕获原始链路层数据包的库；它旨在供对这些数据包进行自己处理的程序和库使用，包括 IP 片段重组等。因此，它不会也永远不会进行 IP 重组；属于一个单独的库。
Libpcap is a library to capture raw link-layer packets; it is intended to be used by programs and libraries that do their own processing of those packets, including IP fragment reassembly, etc.. Therefore, it does not, and will not ever, do IP reassembly; that belongs in a separate library.
发布评论
评论（3）
不，我很确定该补丁没有进入 libpcap。但是您可以使用 libnids 进行 ip 碎片整理（也可以跟踪 TCP 流）。
No, I'm pretty sure that the patch didn't make into libpcap. But you can do ip defragmentation (and also follow TCP streams) with libnids.
如果您正在寻找进行 IP 重组的工具，您可以查看 IPDefragUtil。您还可以查看 IP 重组源代码 此处和此处
If you're looking for a tool that does IP reassembly you can checkout IPDefragUtil. You can also check out out IP reassembly source code here and here
Libpcap 是一个捕获原始链路层数据包的库；它旨在供对这些数据包进行自己处理的程序和库使用，包括 IP 片段重组等。因此，它不会也永远不会进行 IP 重组；属于一个单独的库。
Libpcap is a library to capture raw link-layer packets; it is intended to be used by programs and libraries that do their own processing of those packets, including IP fragment reassembly, etc.. Therefore, it does not, and will not ever, do IP reassembly; that belongs in a separate library.