Wireshark-bugs: [Wireshark-bugs] [Bug 2103] TCP dissector fail to handle heuristic dissectors fo
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2103
------- Comment #10 from did447@xxxxxxxxx 2007-12-19 18:28 GMT -------
(In reply to comment #8)
> The "Reassembled TCP Segments" section seem to be incorrect, but the actual
> dissection seem to work fine, also in the provided capture.
> The end of the "reassembled segment" is set to the end of the complete tcp
> sement instead of the reassembled length.
>
>
> I believe this is a presentation rather than a functional problem.
>
> ----------
> TCP segment size is OK as I see, but there seem to be a start of another
> dsi/afp packet in frame 2. The TCP reassembly reports two 40 byte PDUs
DSI min size is 12 bytes with all DSI headers 16 bytes and AFP packets 24
bytes.
I put
frame 1 :
dsi1 7 Bytes
frame 2 :
dsi1 : 9 Bytes
afp1 : 24 Bytes
dsi2 : 16 Bytes
afp2 : 15 Bytes
frame 3:
afp2: remaining 9 Bytes
DSI/AFP dissections are OK but displayed desegmentation infos and size of frame
2 reassembled TCP tab are wrong.
> (dsi(24)+afp(16)) but the second pdu continues in frame 3. Frame 3 has invalid
> checksum.
The invalid checksum looks like a bug in text2pcap,
>
--
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.