Ethereal-users: Re: [Ethereal-users] Info column changed for (PSH, ACK) messages.

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: "Guy Harris" <gharris@xxxxxxxxx>
Date: Mon, 5 Jun 2006 19:58:48 -0700 (PDT)
Royce Fessenden wrote:
> When the TCP flags byte is 0x0018 (PSH, ACK)  PSH,ACK used to display in
> the info column.  Now it says, "TCP segment of a reassembled PDU".

It should do that only if some dissector thinks the data in the TCP
segment is for its protocol, and it's doing TCP reassembly.

> Was that a deliberate change?

Probably.  Perhaps support for a new protocol was added, so that, in older
versions of Ethereal, it didn't dissect the data past the TCP header, and
now it dissects it as some protocol.

> Is there any way to get the old display back?

Disable the dissector for that protocol.  You might have to turn TCP
reassembly off (it's one of the preferences for TCP) in order to determine
what the protocol is.


_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users