Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 3101] tshark data.data does not display hexdump of 1-byte

Date: Wed, 31 Dec 2008 00:04:57 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3101


Sake <sake@xxxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |WONTFIX




--- Comment #5 from Sake <sake@xxxxxxxxxx>  2008-12-31 00:04:55 PDT ---
OK, I have checked why the last byte is not shown, it is caused by:
(from packet-tcp.c)

  /* dont call subdissectors for keepalive or zerowindowprobes
   * even though they do contain payload "data"
   * keeaplives just contain garbage and zwp contain too little data (1 byte)
   * so why bother.
   */
  if(tcpd && tcpd->ta){
    if(tcpd->ta->flags&(TCP_A_ZERO_WINDOW_PROBE|TCP_A_KEEP_ALIVE)){
      return TRUE;
    }
  }

Since the ZWP in this tracefile was caused by the fact there was only traffic
in one direction (which normally is not the case) and that there is a
workaround. I am closing this bug as WONTFIX.


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.