Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 2103] TCP dissector fail to handle heuristic dissectors fo

Date: Wed, 19 Dec 2007 18:28:43 +0000 (GMT)
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2103





------- Comment #10 from did447@xxxxxxxxx  2007-12-19 18:28 GMT -------
(In reply to comment #8)
> The "Reassembled TCP Segments" section seem to be incorrect, but the actual
> dissection seem to work fine, also in the provided capture.
> The end of the "reassembled segment" is set to the end of the complete tcp
> sement instead of the reassembled length.
> 

> 
> I believe this is a presentation rather than a functional problem.
> 
> ----------
> TCP segment size is OK as I see, but there seem to be a start of another
> dsi/afp packet in frame 2. The TCP reassembly reports two 40 byte PDUs
DSI min size is 12 bytes with all DSI headers 16 bytes and AFP packets 24
bytes.
I put
frame 1 :
dsi1 7 Bytes

frame 2 :
dsi1 :  9 Bytes 
afp1 : 24 Bytes

dsi2 : 16 Bytes
afp2 : 15 Bytes 

frame 3: 
afp2: remaining 9 Bytes

DSI/AFP dissections are OK but displayed desegmentation infos and size of frame
2 reassembled TCP tab are wrong.

> (dsi(24)+afp(16)) but the second pdu continues in frame 3. Frame 3 has invalid
> checksum.
The invalid checksum looks like a bug in text2pcap, 
> 


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.