[ronnie sahlberg <ronniesahlberg@xxxxxxxxx>]

There are two problems with having TCP reassembly enabled by default.

1, Many work with large captures.   300MB-1GB capture files are not unusual.
You do NOT want to enable reassembly on a CIFS, NFS or iSCSI capture that big!

2, If there are packets missing from the capture (because the capture
device cant keep up with the line rate) then
the higher layer PDUs wont be dissected at all.
(when reassembly is enabled, the next layer dissector will ONLY be
called IF the entire PDU has been successfully reassembled).


But then again,   most people probably only work with very small
captures   taken on very slow links   so the problems above would
never occur for them.



On 9/23/05, Joerg Mayer <jmayer@xxxxxxxxx> wrote:
> On Sat, Sep 24, 2005 at 12:33:41AM +0200, Ulf Lamping wrote:
> > To my experience I would STRONGLY VOTE TO ENABLE ALL OF THIS REASSEMBLY
> > THINGS AS DEFAULT.
>
> full ack
>
>  Joerg
> --
> Joerg Mayer                                           <jmayer@xxxxxxxxx>
> We are stuck with technology when what we really want is just stuff that
> works. Some say that should read Microsoft instead of technology.
>
> _______________________________________________
> Ethereal-dev mailing list
> Ethereal-dev@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-dev
>