Wireshark-users: [Wireshark-users] Finding mismatched HTTP Content-Length and the data
Date: Tue, 28 Oct 2008 10:59:13 +0800
Hello,

I'm trying to find the web server's response that includes a
Content-Length header that indicates a smaller value than the length
of the data in the response. For example, if the web server sends a
response with a Content-Length header value of 10 bytes, but the data
size of the response is more than 10 bytes

I am able to find the data length, by clicking on the data part of the
packet and manually check against the Content-Length in header. It's
too painful for me to look through thousands of packets.

I really appreciate your help.

Regards,
-- 
./D