Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 4715] http dissector fails to detect apparent legitimate h

Date: Tue, 9 Aug 2011 19:06:22 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4715

Jeff Morriss <jeff.morriss.ws@xxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |jeff.morriss.ws@xxxxxxxxx
            Summary|http dissector fails to     |http dissector fails to
                   |detect apparent legitimate  |detect apparent legitimate
                   |http response               |http response when there
                   |                            |are TCP retransmissions

--- Comment #1 from Jeff Morriss <jeff.morriss.ws@xxxxxxxxx> 2011-08-09 19:06:21 PDT ---
Frame 6 is the START of an HTTP response, but it's a big response spanning many
packets.

Unfortunately frames 21, 27, and 62 are retransmissions; these confuse the HTTP
dissector which messes up the dissection.  If you ignore those 3 packets (which
is possible in modern versions of Wireshark) then frame 83 is correctly
dissected as the reassembled response.

Updating the Synopsis.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.