Wireshark-dev: [Wireshark-dev] Broken HTTP de-chunking?
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Mike Duigou <wireshark@xxxxxxxxxx>
Date: Mon, 25 Jun 2007 17:24:20 -0700
Enclosed is a small pcap capture extracted from a larger capture. I've had a lot of difficulty getting correct reassembly of the JXTA messages which are in the HTTP response.
It seems that the chunked content is not being correctly recognized/re-assembled and the Response Body is never handed off to the JXTA dissector. Looking at the TCP stream using "Follow TCP Stream" everything seems correct.
Anyone see anything wrong with the chunked response in frames 10, 12 and 14 and can explain why the http dissector doesn't recognize it correctly? 

Mike

Attachment: jxta.chunked.http.pcap.gz
Description: GNU Zip compressed data