Lucas Sweany - 2009-01-10

Many of the alerts I download to pcap from BASE show up with a fragment offset of 16, even though they do not appear that way in BASE's interface. I have examined the downloaded pcap file in both windump and wireshark to confirm. Is this a known bug?