Wireshark-bugs: [Wireshark-bugs] [Bug 1236] TCP allow subdissector to reassemble TCP stream does
Date: Wed, 22 Nov 2006 14:55:00 +0000 (GMT)
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1236





------- Comment #3 from f.zarifian@xxxxxxxxxxx  2006-11-22 14:54 GMT -------
  The result is the same if "Validate the TCP checksum if possible" ticked or
unticked (tested): 

  wireshark does not reassemble packet fine: as you can see in the "Test file"
the packet #4 contains the response of the HTTP request on packet #1

  when "allow subdissector to reassemble TCP stream" is checked , the normal
result must be for my test file 

Normal way:  
  #1 : HTTP GET /something.css HTTP/1.1
  #2 : [TCP segment of a reassembled PDU]
  #3 : TCP ack
  #4 : [TCP segment of a reassembled PDU]
  #5 : HTTP/1.1 200 OK (text/css)
  #6 : TCP ack

and as you can see it is not what it is done (and we cannot see the http
response):

What it is done:
  #1 : HTTP GET /something.css HTTP/1.1
  #2 : Continuation or non HTTP trafic
  #3 : TCP ack
  #4 : [TCP segment of a reassembled PDU]
  #5 : [TCP segment of a reassembled PDU]
  #6 : TCP ack


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.