Wireshark mailing list archives
TCP reassemble question
From: Bo Xu <xubo.leo () gmail com>
Date: Sun, 16 May 2010 21:40:10 +0800
Hi guys , Wireshark can reassemble the tcp packets which is very cool feature. For example ,If the reassemble option is disabled in the preference, assume #9 and #10 are carrying the whole piece information , there will be these 2 prompt line in #9 : Numer of bytes in flight :1460 Last frame of this PDU : 10 I would like to know how wireshark know these TCP segments are together ?
___________________________________________________________________________ Sent via: Wireshark-users mailing list <wireshark-users () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-users Unsubscribe: https://wireshark.org/mailman/options/wireshark-users mailto:wireshark-users-request () wireshark org?subject=unsubscribe
Current thread:
- TCP reassemble question Bo Xu (May 16)
- Re: TCP reassemble question Sake Blok (May 16)
- Re: TCP reassemble question Bo Xu (May 17)
- Re: TCP reassemble question Sake Blok (May 16)