Which IP header indicators are used to identify fragments for reassembly?

• A. ip.Protocol and ip.TTL
• B. ip.id and ip.dest
• C. ip.src and ip.dst
• D. ip.frag_offset and ip.more_frag

Answer: (D)

Fragments are reassembled by looking at how each piece fits into the original payload and whether more pieces follow. The fragment offset tells you where this fragment’s data starts within the original datagram, so fragments can be ordered correctly. The More Fragments flag indicates whether there are additional fragments after this one, signaling when the complete set has been received. Together, these fields provide the essential clues about the fragmentation state and how to reassemble the full packet. (Note that the IP identification field also helps group fragments from the same original packet, but the combination shown here—fragment offset and More Fragments—is what directly guides the reassembly process.)