Ethereal-dev: Re: [Ethereal-dev] Adding Content-Type 'multipart/form-data' to HTTP parsing

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Thu, 22 Jan 2004 15:54:21 -0800

On Jan 21, 2004, at 5:58 AM, Yaniv Kaul wrote:
Specifically, I see that the parsing of media is done in the packet boundaries, and not on the stream - so if there are other parts in the next packet, it is treated sa 'continuation'. 

Only if you haven't turned on the

	Desegment all HTTP headers spanning multiple TCP segments

and
Trust the "Content-length:" header and desegment HTTP bodies spanning multiple TCP segments
options for the HTTP dissector, along with the "Allow subdissector to desegment TCP streams" option for the TCP dissector (and if your traffic includes packets sent on an interface that does TCP checksum offloading and that is on the machine running Ethereal/Tethereal, also turn off the "Check the validity of the TCP checksum when possible" option).