Wireshark-bugs: [Wireshark-bugs] [Bug 1236] TCP allow subdissector to reassemble TCP stream does

Date: Thu, 23 Nov 2006 01:07:58 +0000 (GMT)
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1236


f.zarifian@xxxxxxxxxxx changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|TCP allow  subdissector to  |TCP allow subdissector to
                   |reassemble TCP stream does  |reassemble TCP stream does
                   |not work                    |not work / tcp.analysis
                   |                            |problems




------- Comment #5 from f.zarifian@xxxxxxxxxxx  2006-11-23 01:07 GMT -------
> When wireshark detecs packet 2  it can not find any matching PDU that this
> belongs to and thus marks it as a "continuation" since this is the best guess.

I don't know if you see the SACK in the packet #3... i think this information
is important to handle this bug, and remember TCP is a cumulative prototcol, so
if their is a hole in the seq/ack numbers, we must wait information to put in
this hole 

> ... but where the header is in the retransmitted packet 4.

Hum i don't see any retransmission in my test file... Have I to open other bug
for "tcp.analysis.retransmission" ?

Retransmission (when tcp.len <> 0): a packet (same seq, same ack, same way)
transmitted more than one time when sack is not activated  ( or if sack is
activated one part of the window already SACKed transmitted more than one time
)


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.