Wireshark-bugs: [Wireshark-bugs] [Bug 3529] New: some HTTP POST requests not recognised as HTTP

Date: Thu, 11 Jun 2009 08:38:57 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3529

           Summary: some HTTP POST requests not recognised as HTTP
           Product: Wireshark
           Version: 1.0.7
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Normal
          Priority: Low
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: thijs@xxxxxxxxxx


Created an attachment (id=3109)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=3109)
exampe capture displaying the problem

Build Information:
wireshark 1.0.7

Copyright 1998-2009 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GTK+ 2.16.1, with GLib 2.20.1, with libpcap 1.0.0, with libz
1.2.3.3, with POSIX capabilities (Linux), with libpcre 7.8, without SMI,
with
ADNS, with Lua 5.1, with GnuTLS 2.4.2, with Gcrypt 1.4.1, with MIT Kerberos,
with PortAudio V19-devel (built Mar  4 2009), without AirPcap.

Running on Linux 2.6.28-11-generic, with libpcap version 1.0.0.

Built using gcc 4.3.3.


[also happens on a Mac/powerpc platform with Wireshark 1.0.2.]
--
Hi,

Some HTTP POST requests that we see in our dumps are not correctly recognised
as being of the HTTP protocol. We've studied the content but cannot find what
the crucial difference with other POSTs is that are recognised.

Attached is a real life sample of traffic that we encountered in the wild.


thanks,
Thijs


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.