wireshark-dev May 2011 archive
Main Archive Page > Month Archives  > wireshark-dev archives
wireshark-dev: Re: [Wireshark-dev] TCP dissect issue when app-le

Re: [Wireshark-dev] TCP dissect issue when app-level message spans multiple TCP packets

From: Jeff Morriss <jeff.morriss.ws_at_nospam>
Date: Thu May 05 2011 - 21:22:42 GMT
To: Developer support list for Wireshark <wireshark-dev@wireshark.org>

Fernandez, Rafael wrote:
> I completely agree with your answer. That is what I expect to happen.
> I was able to download wireshark-1.5.2-SVN-36997, compile against it, and the issue still happens.
> I must note that there is a [TCP Previous segment lost] and a [TCP out-of-order] 10 frames apart and it is also where the problem starts occurring until the end of the capture file.

Oh, those out-of-order packets are quite possibly the problem: see the
recent discussion here on "Handling TCP packets reordering".
___________________________________________________________________________
Sent via: Wireshark-dev mailing list <wireshark-dev@wireshark.org>
Archives: http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request@wireshark.org?subject=unsubscribe