Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-bugs: [Wireshark-bugs] [Bug 2722] Follow TCP stream detects FIN flags as missing byte

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Wed, 1 Oct 2008 04:01:11 -0700 (PDT)

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2722





--- Comment #4 from RodrigoT <rtarty@xxxxxxxxx>  2008-10-01 04:01:10 PDT ---
As stated before, i cant provide the capture file, but i found the problem is
related with the capacity of Wireshark to rebuild the stream if there are
packets missing that are retransmitted later. It just looks like Wireshark has
a very short sight and marks the bytes missing without waiting to see if the
packet is retransmitted. Attached is a Scapy script which helps with the
problem.


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

  • Prev by Date: [Wireshark-bugs] [Bug 2716] Dissection of 802.16e-2005 related TLVs in WIMAXASNCP plugin
  • Next by Date: [Wireshark-bugs] [Bug 2743] tshark, when run without -w, should have dumpcap pipe the packets to it
  • Previous by thread: [Wireshark-bugs] [Bug 2716] Dissection of 802.16e-2005 related TLVs in WIMAXASNCP plugin
  • Next by thread: [Wireshark-bugs] [Bug 2722] Follow TCP stream detects FIN flags as missing byte
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation