ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 3315] Segments of reassembled PDU's not saved when saving

Date: Fri, 27 Apr 2012 12:03:46 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3315

--- Comment #23 from Jeff Morriss <jeff.morriss.ws@xxxxxxxxx> 2012-04-27 12:03:45 PDT ---
(In reply to comment #22)
> (In reply to comment #20)
> > Turns out this wasn't quite as complicated as I had thought; I fixed it in
> > r41216.  You can read the rather long checkin comment here:
> > 
> > http://anonsvn.wireshark.org/viewvc/viewvc.cgi?view=rev&revision=41216
> > 
> > It hasn't been tested on Windows yet (Windows uses a different Save-As dialog
> > than other platforms).
> > 
> > It seems to work well for me with reassembled SCTP and TCP packets. 
> > Reassembled IP packets "should" work but I didn't have any sample captures
> > using IP fragmentation handy.
> > 
> > If you're interested (and it actually compiles ;-)), you can try it out after a
> > few hours with one of the buildbot builds:
> > 
> > http://www.wireshark.org/download/automated/
> > 
> > Any feedback is welcome.
> 
> Here is your feedback: you are awesome !!!
> WS is now usable with big SIP packets like those typically seen in IMS (yeah,
> it took the cumulative work of several idiots to build a 2kb INVITE. But they
> are a fact of life now.)
> 
> One important use case is to start from a huge "blind" capture mixing dozens of
> unrelated dialogs, then focus on a single interesting one with proper
> filtering, then ... try to export the filtered result. Before your fix, the
> habit was to carry around the big .cap along with a text note saying "use this
> filter". Now the Stone Age is over: thanks a million.

Oops, missed this update.  Just wanted to say thanks for the positive
feedback!! :-)

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.