[Alan Burlison <Alan.Burlison@xxxxxxx>]

Guy Harris wrote:

> If an RSYNC packet is split across TCP segments, it should show a
> "Malformed Packet" or "Unreassembled Packet" indication, not a "Short
> Frame" indication.  If you have an example of a capture where it's
> showing up as "Short Frame" and the frame does *not* have a "bytes
> captured" value less than the "bytes on wire" value, we'd like to see
> the capture to try to figure out why Ethereal's doing that.

Here is a selection of frames showing the problem

--
Alan Burlison
--

Attachment: short
Description: Binary data