https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3529
--- Comment #1 from Sake <sake@xxxxxxxxxx> 2009-06-11 15:18:12 PDT ---
Hi Thijs,
(Hoi Thijs :-))
The client is not sticking to the RFC:
POST /good/receiver/online HTTP/1.1
Host: 78.109.29.114
Content-Type: application/x-www-form-urlencoded
Content-Length: 16
guid=375922916
It says it is going to send 16 bytes (Content-Length: 16), but after the header
(ending in CR/LF CR/LF), only 14 bytes are sent. The server does not seem to
mind since the client closes the connection straight away, so reading up till
FIN is working here.
Wireshark however tries to reassemble data, it takes the argemunt of
Content-Length to read that amount of data until it can say it has the whole
HTTP-PDU. This fails because the data is not available (which is a RFC
violation).
You can turn of reassembly by unchecking the "Allow subdissector to reassemble
segments" flag. This way, the POST will be recognized.
Cheers,
(Groeten)
Sake
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.