http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1534
Summary: Reassembled TCP packets tab doesn't include last packet
Product: Wireshark
Version: 0.99.5
Platform: PC
OS/Version: Linux
Status: NEW
Severity: Normal
Priority: Medium
Component: Wireshark
AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
ReportedBy: alvarezp@xxxxxxxxxxxxxxxx
Build Information:
Version 0.99.5
Copyright 1998-2007 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled with GTK+ 2.8.20, with GLib 2.12.6, with libpcap 0.9.5, with libz
1.2.3, with libpcre 6.7, without Net-SNMP, with ADNS, without Lua, with GnuTLS
1.4.4, with Gcrypt 1.2.3, without Kerberos, with PortAudio <= V18, without
AirPcap.
Running on Linux 2.6.18-4-686, with libpcap version 0.9.5.
Built using gcc 4.1.2 20061115 (prerelease) (Debian 4.1.1-21).
Wireshark is Open Source Software released under the GNU General Public
License.
Check the man page and http://www.wireshark.org for more information.
--
I did this:
1. In wireshark, loaded a tcpdumped file.
2. I applied the following filter: (ip.addr eq 201.160.193.87 and ip.addr eq
74.52.81.241) and (tcp.port eq 35124 and tcp.port eq 80) and http, which is
giving me a single HTTP conversation. The "200 OK" message is long, but TCP
fragments are not shown (this is ok, because of the filter). The "200 OK" hex
dump is shown in two tabs: frame and reassembled.
BUG: The reassembled does NOT include the last frame. I expected otherwise.
This is also true for the "line based text data" in the packet interpretation.
--
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.