Wireshark-commits: [Wireshark-commits] rev 23299: /trunk/epan/dissectors/ /trunk/epan/dissectors/:

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: sake@xxxxxxxxxxxxx
Date: Sun, 28 Oct 2007 23:38:46 GMT
http://anonsvn.wireshark.org/viewvc/viewvc.cgi?view=rev&revision=23299

User: sake
Date: 2007/10/28 11:38 PM

Log:
 This patch is a remake of SVN 22762:
 
 When doing TCP_SEQ analysis, if the packet is a SYN, then it's 
 not a lost packet but the tcp ports are being reused. This is often 
 seen in load-balanced environments where client ports are preserved 
 on the server-side.
 
 This time it is fixed by creating a new conversation whenever a
 new SYN is received for an existing conversation. This fixes the
 following:
 
 - bug 1680: Error in TCP Sequence number analysis
 - TCP-conversation timestamps for new TCP-sessions with the addresses 
   and ports as a previous TCP-conversation in the trace-file.

Directory: /trunk/epan/dissectors/
  Changes    Path            Action
  +92 -59    packet-tcp.c    Modified