Wireshark-users: Re: [Wireshark-users] Disabling TCP reassembly does not work
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: ronnie sahlberg <ronniesahlberg@xxxxxxxxx>
Date: Wed, 18 Feb 2009 12:40:50 +1100

Reassembly works fine for me.

When it is disabled the header is decoded in the first frame, frame 2, of the pdu.
When enabled it shows the full reassembled pdu in frame 41.



On Wed, Feb 18, 2009 at 11:46 AM, Surendra Kumar <surendrakm@xxxxxxxxx> wrote:

The capture file is attached now. Thanks!
From: Surendra Kumar <surendrakm@xxxxxxxxx>
To: wireshark-users@xxxxxxxxxxxxx
Sent: Tuesday, February 17, 2009 3:01:24 PM
Subject: [Wireshark-users] Disabling TCP reassembly does not work

I disabled the "Allow subdissector ..." but still see them being reassambled. Tried multiple versions - 0.99.x to 1.0.6 but does not work on any of them. I see that the negotiated MSS is 1460, but then see segment lengths in the order of 10s of KB. I've attached a pcap file.
I have a need to see the packets as they appear on the wire. Let me know if there is more to disabling this.

The host machine is running Win3K R2 and SP2

Thanks,
SK.




___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
            mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe