Wireshark-bugs: [Wireshark-bugs] [Bug 6392] wireshark fails to detect a couple of tcp packet as
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Sat, 25 Oct 2014 15:39:05 +0000

changed bug 6392


What Removed Added
Status RESOLVED CONFIRMED
Resolution DUPLICATE ---

Comment # 3 on bug 6392 from 
This is a more accurate description of the true problem than bug 9303.  In
packet 25 of the provided capture, the TCP Segment Len is 1460, but the TCP
Segment Data size is 1457.  Those "extra" 3 bytes are not applied to the next
(DCERPC) PDU.

With https://code.wireshark.org/review/4923 applied, those "extra" 3 bytes are
explicitly called out in the packet, but still don't seem to solve the problem
of getting them applied to the next PDU.  The "extra" 3 bytes are considered
"leftover" from TCP dissector, so it calls the data dissector (at the end of
decode_tcp_ports() function) instead of trying applying them to next PDU.

You are receiving this mail because:
  • You are watching all bug changes.