Wireshark-bugs: [Wireshark-bugs] [Bug 11576] RPC packets aren't being dissected

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Thu, 08 Oct 2015 12:04:09 +0000

changed bug 11576


What Removed Added
Status UNCONFIRMED INCOMPLETE
CC   [email protected]
Ever confirmed   1

Comment # 1 on bug 11576 from 
Looks like your capture is too short.
If you uncheck the TCP option 'allow subdissectors to reassemble TCP streams'
you will see that your RPC packet has a length of 524288 bytes.
When the option is activated, Wireshark wait for the reception of the full RCP
packet so as to decode the reassembled packet. But your capture ends after less
than 150k bytes.
So either capture more packets, or uncheck the TCP option. At first glance it
does not seem to be a Wireshark bug.

You are receiving this mail because:
  • You are watching all bug changes.