Wireshark-bugs: [Wireshark-bugs] [Bug 11424] Vssmonitoring Timestamp
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Thu, 06 Aug 2015 15:06:20 +0000

Comment # 4 on bug 11424 from 
(In reply to Aimen Al-Janabi from comment #3)
> Thank you Pascal for the prompt response, I really appreciate the help. I
> understand why this is happening now, and I will contact VSS for this. I was
> just wondering if it is possible that the leading zero's are not part of the
> trailer VSS is adding, instead it is part of the last segment of the packet
> yet misinterpreted by Wireshark? I will exhaust the other options with VSS,
> before I carry on with this.

We can see this with TCP packets that only have a header without payload (Rest
packet for ex) so this really seems to be padding added on purpose by VSS
Monitoring equipment. The fact that it is prepended instead of appended make it
more painful for heuristic detection.

You are receiving this mail because:
  • You are watching all bug changes.