Wireshark mailing list archives

Re: TCP dissect issue when app-level message spans multiple TCP packets


From: Jeff Morriss <jeff.morriss.ws () gmail com>
Date: Thu, 05 May 2011 17:22:42 -0400

Fernandez, Rafael wrote:
I completely agree with your answer. That is what I expect to happen.
I was able to download wireshark-1.5.2-SVN-36997, compile against it, and the issue still happens.
I must note that there is a [TCP Previous segment lost] and a [TCP out-of-order] 10 frames apart and it is also where 
the problem starts occurring until the end of the capture file.

Oh, those out-of-order packets are quite possibly the problem: see the recent discussion here on "Handling TCP packets reordering".
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
            mailto:wireshark-dev-request () wireshark org?subject=unsubscribe


Current thread: