Wireshark-bugs: [Wireshark-bugs] [Bug 3303] Problem with fragmentation at the SSL record layer
Date: Mon, 23 Mar 2015 11:29:48 +0000

Comment # 28 on bug 3303 from
(In reply to Peter Wu from comment #27)
> (In reply to Hubert Kario from comment #26)
> > Created attachment 13394 [details]
> > fragmented client hello message
> > 
> > I see this issue also with TLS client hello (Hello Request) messages when
> > using 1.12.3.
> > 
> > Attached is a reproducer
> 
> What is wrong with the dissection for this capture?

If I tell wireshark to decode the information in packets as "SSL", the first
record from the client (first 10 bytes of ClientHello), in packet 4, is
interpreted as "Encrypted Handshake Message", the second record, in packet 6,
is interpreted as a bunch of "Hello Request" messages.

In reality it's a single correctly formed ClientHello, just split over two
records.


You are receiving this mail because:
  • You are the assignee for the bug.
  • You are watching all bug changes.