Ethereal-users: Re: [Ethereal-users] Payload of TPKT is missing

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Mon, 6 Oct 2003 12:07:06 -0700

On Oct 6, 2003, at 4:54 AM, #YANG YONG# wrote:

Thank you. If that's the case, there should be a TCP segment following this TPKT packet with TPKT payload contained. But in fact, Eathereal didn't captured such a TCP segment.

Which might mean that it wasn't transmitted, or that it was but somehow Ethereal didn't capture it, or that there's a bug in Ethereal. I don't have enough information to say which is the case.

Try turning on the "Analyze TCP sequence numbers" option for TCP (the same way you'd turn on "Allow subdissector to desegment TCP streams"), and see whether it reports any problems (such as missing segments).