Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

In wireshark sometimes I see this:

478195  5738.896809   TCP [TCP segment of a reassembled PDU]

What is a PDU? Was it reassembled? What does this mean?

share|improve this question
up vote 5 down vote accepted

A "PDU" is a "Protocol Data Unit." One unit of information being transferred in accordance with a given protocol (e.g., "login USERNAME very-long-base64-encoded-authentication-data" then wait for server to respond) will be disassembled into many packets (smaller pieces) if it's too large to fit in one packet (or segment in this case).

This is normal and is just TCP/IP working as designed.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .