Jeff Morriss
changed
bug 11144
| What |
Removed |
Added |
| Status |
UNCONFIRMED
|
CONFIRMED
|
| Ever confirmed |
|
1
|
Comment # 2
on bug 11144
from Jeff Morriss
Taking a sample of the messages that are missing in the tshark output, it
appears they are all reassembled (from multiple TCP packets).
I tried adding "-2" to tshark's command line but it didn't help.
Looking a bit closer I think I see the problem: for some reason the Info column
doesn't get populated with the info from multiple (Diameter) messages if TCP
had to do reassembly in that frame.
For example, compare frame 1243 which has 5 Diameter PDUs and a long Info
column to frame 1244 which 6 Diameter PDUs but whose Info column has the
details of only one Diameter message. The difference is there was TCP
reassembly in use for (part of) frame 1244.
I don't have an immediate theory as to why.
You are receiving this mail because:
- You are watching all bug changes.