Wireshark-bugs: [Wireshark-bugs] [Bug 10798] New: HTTP Requests are only partially dissected (da
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Sat, 20 Dec 2014 22:00:11 +0000
Bug ID 10798
Summary HTTP Requests are only partially dissected (data is "thrown away")
Product Wireshark
Version 1.99.x (Experimental)
Hardware x86-64
OS Mac OS X 10.9
Status UNCONFIRMED
Severity Critical
Priority Low
Component Dissection engine (libwireshark)
Assignee bugzilla-admin@wireshark.org
Reporter maki@maki-chan.de 

Created attachment 13340 [details]
The HTTP Request URI is only partially recognized

Build Information:
Version 1.99.1 (v1.99.1-0-g4c229ca from master)

Copyright 1998-2014 Gerald Combs <gerald@wireshark.org> and contributors.
License GPLv2+: GNU GPL version 2 or later
<http://www.gnu.org/licenses/old-licenses/gpl-2.0.html>
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with Qt 5.3.2, with libpcap, without POSIX capabilities, with
libz 1.2.3, with GLib 2.36.0, with SMI 0.4.8, without c-ares, without ADNS,
with
Lua 5.2, with GnuTLS 2.12.19, with Gcrypt 1.5.0, with MIT Kerberos, with GeoIP,
without PortAudio, with AirPcap.

Running on Mac OS X 10.9.5, build 13F34 (Darwin 13.4.0), without locale, with
libpcap version 1.3.0 - Apple version 41, with libz 1.2.5, with GnuTLS 2.12.19,
with Gcrypt 1.5.0, without AirPcap.
      Intel(R) Core(TM) i7-2675QM CPU @ 2.20GHz (with SSE4.2)

Built using llvm-gcc 4.2.1 (Based on Apple Inc. build 5658) (LLVM build
2336.9.00).

Wireshark is Open Source Software released under the GNU General Public
License.

Check the man page and http://www.wireshark.org for more information.
--
HTTP requests are only partially dissected and the info is not retrieved
correctly. As you can see in the attached screenshot, Wireshark cannot tell
what's the request URI what's the HTTP version or the host.

The request itself is recognized as HTTP but it seems Wireshark fails to read
the info in parts.

As you can see in the attached file, the request is recognized, but the URI and
(as seen in the Packet Details window) other HTTP variables of the request
cannot be read correctly.

You are receiving this mail because:
  • You are watching all bug changes.