Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 3315] Segments of reassembled PDU's not saved when saving

Date: Mon, 30 Apr 2012 09:59:50 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3315

--- Comment #24 from Jon C <jon.carmicheal@xxxxxxxxx> 2012-04-30 09:59:49 PDT ---
(In reply to comment #23)
> (In reply to comment #22)
> > (In reply to comment #20)
> > > Turns out this wasn't quite as complicated as I had thought; I fixed it in
> > > r41216.  You can read the rather long checkin comment here:
> > > 
> > > http://anonsvn.wireshark.org/viewvc/viewvc.cgi?view=rev&revision=41216
> > > 
> > > It hasn't been tested on Windows yet (Windows uses a different Save-As dialog
> > > than other platforms).
> > > 
> > > It seems to work well for me with reassembled SCTP and TCP packets. 
> > > Reassembled IP packets "should" work but I didn't have any sample captures
> > > using IP fragmentation handy.
> > > 
> > > If you're interested (and it actually compiles ;-)), you can try it out after a
> > > few hours with one of the buildbot builds:
> > > 
> > > http://www.wireshark.org/download/automated/
> > > 
> > > Any feedback is welcome.
> > 
> > Here is your feedback: you are awesome !!!
> > WS is now usable with big SIP packets like those typically seen in IMS (yeah,
> > it took the cumulative work of several idiots to build a 2kb INVITE. But they
> > are a fact of life now.)
> > 
> > One important use case is to start from a huge "blind" capture mixing dozens of
> > unrelated dialogs, then focus on a single interesting one with proper
> > filtering, then ... try to export the filtered result. Before your fix, the
> > habit was to carry around the big .cap along with a text note saying "use this
> > filter". Now the Stone Age is over: thanks a million.
> 
> Oops, missed this update.  Just wanted to say thanks for the positive
> feedback!! :-)

That is exactly the scenario that I ran into, filtering IMS traffic to reduce
email attachment and storage size.  However, when I checked the link I couldn't
find the r41216 version with the fix.  Did the fix propagate through the future
updates as well?

Thanks,
Jon

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.