Wireshark-bugs: [Wireshark-bugs] [Bug 3529] some HTTP POST requests not recognised as HTTP
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Thu, 11 Jun 2009 15:18:32 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3529





--- Comment #1 from Sake <sake@xxxxxxxxxx>  2009-06-11 15:18:12 PDT ---
Hi Thijs,
(Hoi Thijs :-))

The client is not sticking to the RFC:

POST /good/receiver/online HTTP/1.1
Host: 78.109.29.114
Content-Type: application/x-www-form-urlencoded
Content-Length: 16

guid=375922916

It says it is going to send 16 bytes (Content-Length: 16), but after the header
(ending in CR/LF CR/LF), only 14 bytes are sent. The server does not seem to
mind since the client closes the connection straight away, so reading up till
FIN is working here.

Wireshark however tries to reassemble data, it takes the argemunt of
Content-Length to read that amount of data until it can say it has the whole
HTTP-PDU. This fails because the data is not available (which is a RFC
violation).

You can turn of reassembly by unchecking the "Allow subdissector to reassemble
segments" flag. This way, the POST will be recognized.

Cheers,
(Groeten)


Sake


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.