Wireshark-bugs: [Wireshark-bugs] [Bug 6557] default HTTP dissector fails to detect HTTP bodies t

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Tue, 24 Mar 2015 17:25:45 +0000

changed bug 6557


What Removed Added
CC   [email protected]
Version 1.7.x (Experimental) 1.99.x (Experimental)

Comment # 1 on bug 6557 from 
It looks like bug 9154 except that this issue occurs on a stream with TCP RST
flag set.

Your capture has a HTTP response without Content-Length. The HTTP dissector
*should* have been called on connection termination with the packets gathered
so far (it has set DESEGMENT_UNTIL_FIN).

The problem is that DESEGMENT_UNTIL_FIN only works for TCP FIN, not TCP RST. As
a result, the TCP segments are not reassembled and the HTTP dissector never
gets called.

You are receiving this mail because:
  • You are watching all bug changes.