Wireshark-bugs: [Wireshark-bugs] [Bug 9044] "Follow TCP Stream" show only first HTTP req+res
Vojtech Vobr
changed
bug 9044
| What |
Removed |
Added |
| CC |
|
vojtech@vobr.net
|
Comment # 7
on bug 9044
from Vojtech Vobr
(In reply to comment #6)
> Please tell me that follow_tcp.c doesn't duplicate the HTTP processing code
> that the HTTP dissector has.
I'm afraid that it tries to duplicate the HTTP processing code. Some problems I
can see in the code, patch from comment 5 doesn't seem to fix most of them
- it doesn't handle Keep-Alive connections (might be workaround by the patch)
- it doesn't handle HTTP pipelining (once gzip unpacking is set, the code
doesn't care about direction of the traffic)
- no handling of chunked Transfer-Encoding
I think the easiest way how to fix this problem might be to revert changes from
bug 3528, because right now is Follow TCP stream unusable for HTTP traffic.
I also agree with Sake, that this functionality shouldn't be in Follow TCP
stream at all (I really want to see raw stream), it should be a separate item,
similar to Follow SSL stream.
You are receiving this mail because:
- You are watching all bug changes.
