I am getting a lot of reassembled packets on a busy router. is there a way to see what those packets are. I need to know the source/destination IP at least. I do not want to impact the router's performance either, as it routes about 5000 pps. the "show ip traffic" shows:
Frags: 249249372 reassembled, 24159 timeouts, 0 couldn't reassemble
1861391 fragmented, 3722914 fragments, 325744 couldn't fragment
the amount of reassembled packets increases like 100 per second, fragmented - 10 per second. I could not find a command to show what those packets are, thus I need the community's help to figure this out. Thanks.