Wireshark-bugs: [Wireshark-bugs] [Bug 7364] Wireshark fails to reassemble subsequent TCP segment
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Mon, 11 Feb 2013 20:55:33 +0000

changed bug 7364

What Removed Added
CC   turney_cal@emc.com

Comment # 3 on bug 7364 from 
(In reply to comment #3)

Hello Richard,
I think this bug report can be closed. The reason that the PDU was not
reassembled is because the frames were sliced at 1500 bytes but were 1514 bytes
in length. 

The WS version shown in the screenshot at least decoded frame 7 as a
SET_SECURITY_DESC request but cuurent revs such as v1.8.4 and the v1.9.0 do
not. I think that is a bug because when a PDU cannot be decoded due to slicing
or missing frames, we should try to decode as much of the PDU as possible. In
fact i think that an option should be provided that allows WS, when one or more
frames are missing from a PDU, to search for an SMB header anywhere in the
subsequent frames (not just after the NetBIOS header). Today we have to do
manual searches in the Hex pane.

Regards,
Cal (turney_cal@emc.com)

You are receiving this mail because:
  • You are watching all bug changes.