Ethereal-users: [Ethereal-users] "TCP Segment of a Reassembled PDU" vs. "Continuation or non-HTT

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Feeny, Michael (TD&DS, Applications Infrastructure Svcs.)" <michael_feeny@xxxxxx>
Date: Mon, 17 Apr 2006 23:24:30 -0400

Hello,

 

I’ve recently been using Ethereal (0.10.14) to look at HTTP traces, and I’m confused by 2 of the diagnostic messages.

 

I have 2 different trace files, each of which contains an HTTP “POST” request that is split across 2 packets.  In one of the traces, Ethereal displays "TCP Segment of a Reassembled PDU" for the 1st of these 2 packets, and in the other, it displays "Continuation or non-HTTP traffic" for the 2nd of the 2 packets.

 

Can someone explain the distinction?

 

One difference in the 2 traces:  In the first trace, HTTP is sent over a non-standard TCP port (3139), and so I have to use “Analyze/Decode as…” to force Ethereal to interpret the traffic as HTTP.  Does that explain the difference in diagnostic messages?

 

Thx much,

Michael

 

Michael Feeny

I2T  -  Application Integration Management

609-274-2761 (Office)

484-995-1745 (Mobile)

feenyman99 (AIM)

If you are not an intended recipient of this e-mail, please notify the sender, delete it and do not read, act upon, print, disclose, copy, retain or redistribute it. Click here for important additional terms relating to this e-mail.     http://www.ml.com/email_terms/