Michael Mann
changed
bug 6392
| What |
Removed |
Added |
| Status |
RESOLVED
|
CONFIRMED
|
| Resolution |
DUPLICATE
|
---
|
Comment # 3
on bug 6392
from Michael Mann
This is a more accurate description of the true problem than bug 9303. In
packet 25 of the provided capture, the TCP Segment Len is 1460, but the TCP
Segment Data size is 1457. Those "extra" 3 bytes are not applied to the next
(DCERPC) PDU.
With https://code.wireshark.org/review/4923 applied, those "extra" 3 bytes are
explicitly called out in the packet, but still don't seem to solve the problem
of getting them applied to the next PDU. The "extra" 3 bytes are considered
"leftover" from TCP dissector, so it calls the data dissector (at the end of
decode_tcp_ports() function) instead of trying applying them to next PDU.
You are receiving this mail because:
- You are watching all bug changes.