Wireshark-bugs: [Wireshark-bugs] [Bug 11144] diameter packages missing in text format
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Fri, 24 Apr 2015 15:27:48 +0000

changed bug 11144


What Removed Added
Status UNCONFIRMED CONFIRMED
Ever confirmed   1

Comment # 2 on bug 11144 from 
Taking a sample of the messages that are missing in the tshark output, it
appears they are all reassembled (from multiple TCP packets).

I tried adding "-2" to tshark's command line but it didn't help.

Looking a bit closer I think I see the problem: for some reason the Info column
doesn't get populated with the info from multiple (Diameter) messages if TCP
had to do reassembly in that frame.

For example, compare frame 1243 which has 5 Diameter PDUs and a long Info
column to frame 1244 which 6 Diameter PDUs but whose Info column has the
details of only one Diameter message.  The difference is there was TCP
reassembly in use for (part of) frame 1244.

I don't have an immediate theory as to why.

You are receiving this mail because:
  • You are watching all bug changes.