Wireshark-dev: [Wireshark-dev] Problem in wireshark packet captured
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: "prashanth s" <prbanglore@xxxxxxxxx>
Date: Mon, 24 Nov 2008 16:11:16 +0530
Hi,
I am capturing the Gmail traffice on wireshark. However for HTTP POST messages I get in the Protocol Column of wireshar, IP as the protocol name. And Info column of wireshark reads as "Bogus IP length (0, less than header length 20). Destination reads like "Sonicwal_**:**:** "
And HTTP POST is actually seen under the tree node "Trailer" under  the subtree "Ethernet II "
It should actually be decoding as TCP and under TCP it should be HTTP. Instead I am seeing IP.
 
However this has been happening after I installed windows. Earlier I used to have linux. I never faced any such problems in captured file.
What may be the problem behind this?
If any of you could you assist me with your answers it would be great for me.
 
Regards,
Prashanth