Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 2450] New: HTTP messages not being reassembled

Date: Fri, 11 Apr 2008 20:15:33 +0000 (GMT)
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2450

           Summary: HTTP messages not being reassembled
           Product: Wireshark
           Version: 0.99.6
          Platform: PC
               URL: http://www.wireshark.org/lists/wireshark-
                    users/200804/msg00154.html
        OS/Version: Linux
            Status: NEW
          Severity: Major
          Priority: High
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: yang.wiresharkbugs@xxxxxxxxxxxx


Created an attachment (id=1669)
 --> (http://bugs.wireshark.org/bugzilla/attachment.cgi?id=1669)
Screenshot of the unmerged HTTP reply

Build Information:
wireshark 0.99.6

Copyright 1998-2007 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GTK+ 2.12.0, with GLib 2.14.1, with libpcap 0.9.7, with libz
1.2.3.3, with libpcre 7.4, without Net-SNMP, with ADNS, without Lua, with
GnuTLS
1.6.3, with Gcrypt 1.2.4, with MIT Kerberos, with PortAudio <= V18, without
AirPcap.

Running on Linux 2.6.22-14-generic, with libpcap version 0.9.7.

Built using gcc 4.1.3 20070929 (prerelease) (Ubuntu 4.1.2-16ubuntu2).


--
Yang Zhang wrote:

> > Here's what I'm seeing:

[see attached screenshot]

So it *did* reassemble frames 1 and 3 into an HTTP reply, but didn't 
appear to reassemble frame 10 with the frame that preceded it 
(presumably frame 9).

We'd need to see the raw capture file in order to debug this.  File a 
bug on bugzilla.wireshark.org, and attach the capture.
_______________________________________________
Wireshark-users mailing list
Wireshark-users@xxxxxxxxxxxxx
http://www.wireshark.org/mailman/listinfo/wireshark-users



Will also be attaching a full saved capture (different session from what's seen
in the scrshot).


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.