Wireshark-bugs: [Wireshark-bugs] [Bug 12411] All but the last packet of a reassembled PDU over T
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Mon, 09 May 2016 21:37:20 +0000

Comment # 3 on bug 12411 from 
(In reply to Dmitriy from comment #2)
> So adding a mechanism of labelling all such packets as HTTP and not just the
> final ones 

Here you only consider the 'sunny day scenario' of all TCP fragments (and
possibly all IPv4 fragments underneath those! How are these to be labeled?) are
indeed captured. What if a fragment is missing, a rainy day scenario? That is
usually when Wireshark is called into action.

> so that entire HTTP messages carried in them are decoded properly
> would be perfect.

The entire HTTP message is decoded properly, as soon as the *full* HTTP message
is seen, which can only mean the final TCP fragment.

You are receiving this mail because:
  • You are watching all bug changes.