On Tue, May 13, 2008 at 08:04:09PM +0200, Sake Blok wrote:
>
> On Sat, May 10, 2008 at 12:04:21AM -0700, Deepti Kumar wrote:
>
> > (2) What are these negative values?
>
> That should not happen. I think there might be a bug in the code
> that displays these messages, could you please open a bug report on
> http://bugs.wireshark.org and attach the capture file that shows
> this behavior? I will try to have a look at it when time permits :-)
Well, I could not resist to look into this issue already. There were
indeed some errors in the reassembly routine. I have committed a fix.
You can download an automated build in a couple of hours from:
http://www.wireshark.org/download/automated/
(please make sure you get a file with a number higher than 25289)
Cheers,
Sake