Wireshark-bugs: [Wireshark-bugs] [Bug 3303] Wireshark is somehow not capable of dissecting a han

Date: Wed, 8 Jul 2009 10:47:05 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3303





--- Comment #11 from Sake <sake@xxxxxxxxxx>  2009-07-08 10:47:00 PDT ---
(In reply to comment #10)
> I've had similar experiences as what Michael saw. I'm trying to decrypt LDAP
> over SSL but whenever there are TCP-out-of-order, DUP ACKs, or lost ACKS, then
> the decryption seems to become bogus and I can see nothing from that point on.

Actually, that is different behavior. This bug is handling an issue where the
SSL record layer is fragmenting SSL data into multiple SSL records (which in
turn wil be segmented by TCP).

TCP segments that are out-of-order are a general problem with tcp-reassembly.
If they are caused by duplicate packets (as in your trace) you might want to
filter out the duplicates with "editcap -d"

Duplicate ACK's and lost ACK's should not be a problem though...

> Just wanted to mention that this seems to be an issue that deserves to be a
> higher priority than Low.

Then you might want to open a new bug for the problem with TCP reassembly when
packets are out-of-order.

Cheers,


Sake


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.