Ethereal-users: [Ethereal-users] Re: Bug in display ASCII by tcp-follow ???

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Holger Hiort <hhiort.ml@xxxxxxx>
Date: Thu, 22 Mar 2001 22:12:44 +0100
Reference:  Gilbert Ramirez <gilramir@xxxxxxxxx> on Thu, 22 Mar 2001: 

> g.kruckow@xxxxxx wrote:

>> Hello,
>> if you use tcp-follow  in the attached trace, (in "Contens of TCP..") the
>> packet 16 can't decode in ASCII (can't see anything of packet 16) but in
>> HEX can you see the data of packet 16. If you "print in file" you can see
>> all data.

> It works just fine for me, using Ethereal 0.8.16 on Linux.
> What version of Ethereal are you using, and on which OS?

This may be a specifically german disability <g>, but I (Win98 SE,
Ethereal 0.8.16, WinPcap 2.1) seem to suffer from the same problem as
my compatriote Gregor.

Sometimes, the 'Contents of TCP-stream' window intercepts part of the
stream in ASCII mode display, while showing the entire stream without
any gap in HEX mode display. In Gregor's capture file, the payload of
frame #16, starting at offset 00000055 hex-displayed, does _not_ show
up in the ascii display on my screen either. (I personally can live
with this issue, at least the display in ethereal's other windows is
not affected.)

Regards, hh.