Wireshark-bugs: [Wireshark-bugs] [Bug 1236] TCP allow subdissector to reassemble TCP stream does
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1236
------- Comment #3 from f.zarifian@xxxxxxxxxxx 2006-11-22 14:54 GMT -------
The result is the same if "Validate the TCP checksum if possible" ticked or
unticked (tested):
wireshark does not reassemble packet fine: as you can see in the "Test file"
the packet #4 contains the response of the HTTP request on packet #1
when "allow subdissector to reassemble TCP stream" is checked , the normal
result must be for my test file
Normal way:
#1 : HTTP GET /something.css HTTP/1.1
#2 : [TCP segment of a reassembled PDU]
#3 : TCP ack
#4 : [TCP segment of a reassembled PDU]
#5 : HTTP/1.1 200 OK (text/css)
#6 : TCP ack
and as you can see it is not what it is done (and we cannot see the http
response):
What it is done:
#1 : HTTP GET /something.css HTTP/1.1
#2 : Continuation or non HTTP trafic
#3 : TCP ack
#4 : [TCP segment of a reassembled PDU]
#5 : [TCP segment of a reassembled PDU]
#6 : TCP ack
--
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.