Ethereal-users: Re: [Ethereal-users] Follow TCP Stream fails to show entire conversation (half-c

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Wed, 17 Sep 2003 13:51:38 -0700

On Sep 17, 2003, at 12:51 AM, Sulko Ville SOON wrote:


The problem is, that when I use 'Follow TCP Stream' -feature, only
the request is shown. "Entire conversation" shows only send data, and
when selecting to show only the reply direction, nothing is shown.
Now I think it would be logical to conclude this has something to do
with the stream being half-closed in the middle.
Possibly, but the only open/close indications the code that constructs the TCP streams sees are open indications (SYN flags), so I'm not sure how that could be the cause. 

Do you have a capture file you can send us that demonstrates this?