Wireshark-users: Re: [Wireshark-users] How to view TCP responses
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Steinar Bang <sb@xxxxxx>
Date: Wed, 09 Apr 2008 17:47:43 +0200
>>>>> Sake Blok <sake@xxxxxxxxxx>:

> You could either turn of reassembly (in the tcp protocol preferences
> or in the http protocol preferences) or install a more recent version
> of Wireshark (I'm not sure though in which version it was fixed, so
> you might want to go straight to the latest version, which is 1.0).

Unchecking "Allow subdissector to reassemble TCP streams" in the TCP
protocol preferences, made the response packets immediately appear in an
existing capture, so that did the trick for me.

Thanx!


- Steinar