Wireshark-bugs: [Wireshark-bugs] [Bug 9364] New: Add HTTP content-length mismatch into expert in
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Thu, 31 Oct 2013 21:18:01 +0000
Bug ID 9364
Summary Add HTTP content-length mismatch into expert info
Classification Unclassified
Product Wireshark
Version 1.8.2
Hardware All
OS All
Status UNCONFIRMED
Severity Enhancement
Priority Low
Component Dissection engine (libwireshark)
Assignee bugzilla-admin@wireshark.org
Reporter n.deepak@gmail.com 

Created attachment 11949 [details]
Patch to add error expert info if HTTP payload is more than content-length
header value

Build Information:
I have downloaded wireshark-1.8.2 sources, since that is the version on my
Ubuntu (13.04).

--
If HTTP response contains "Content-Length: x" but the payload is actually more
than x bytes, then we use the lower (header) value.

At this time, we can add a "malformed-packet" error expert info.

This is useful because ADCs (application load balancers) stop tracking such
connections because the server is sending more than what it advertised.  A
trace loaded on Wireshark with this change will show any such malformed
responses.

You are receiving this mail because:
  • You are watching all bug changes.