Regarding reassembly of segmented packets.

[Nilesh Tayade <nilesh.tayade85 () gmail com>]

Hi,

I am looking at some of the HTTPS traces and I saw there are many
packets segmented when large chunk of data is coming.
However, Wireshark displays both - the segments and then the reassembled
packet.

Could someone please provide a pointer how Wireshark does it? What is
the logic it applies in reassembling the relevant segments only?
Basically I am not able to understand how it keeps the end-of-record mark.

--
Thanks,
Nilesh
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe