Wireshark-bugs: [Wireshark-bugs] [Bug 1236] TCP allow subdissector to reassemble TCP stream does
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1236
f.zarifian@xxxxxxxxxxx changed:
What |Removed |Added
----------------------------------------------------------------------------
Summary|TCP allow subdissector to |TCP allow subdissector to
|reassemble TCP stream does |reassemble TCP stream does
|not work |not work / tcp.analysis
| |problems
------- Comment #5 from f.zarifian@xxxxxxxxxxx 2006-11-23 01:07 GMT -------
> When wireshark detecs packet 2 it can not find any matching PDU that this
> belongs to and thus marks it as a "continuation" since this is the best guess.
I don't know if you see the SACK in the packet #3... i think this information
is important to handle this bug, and remember TCP is a cumulative prototcol, so
if their is a hole in the seq/ack numbers, we must wait information to put in
this hole
> ... but where the header is in the retransmitted packet 4.
Hum i don't see any retransmission in my test file... Have I to open other bug
for "tcp.analysis.retransmission" ?
Retransmission (when tcp.len <> 0): a packet (same seq, same ack, same way)
transmitted more than one time when sack is not activated ( or if sack is
activated one part of the window already SACKed transmitted more than one time
)
--
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
