https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4715
Jeff Morriss <jeff.morriss.ws@xxxxxxxxx> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |jeff.morriss.ws@xxxxxxxxx
Summary|http dissector fails to |http dissector fails to
|detect apparent legitimate |detect apparent legitimate
|http response |http response when there
| |are TCP retransmissions
--- Comment #1 from Jeff Morriss <jeff.morriss.ws@xxxxxxxxx> 2011-08-09 19:06:21 PDT ---
Frame 6 is the START of an HTTP response, but it's a big response spanning many
packets.
Unfortunately frames 21, 27, and 62 are retransmissions; these confuse the HTTP
dissector which messes up the dissection. If you ignore those 3 packets (which
is possible in modern versions of Wireshark) then frame 83 is correctly
dissected as the reassembled response.
Updating the Synopsis.
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.