ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Wireshark-dev: [Wireshark-dev] HTTP reassembly?

From: Yang Ning <yang.ning@xxxxxxxxxxx>
Date: Wed, 25 Mar 2009 20:31:45 -0400
I noticed that for the http dissection, The http OK message is displayed at the end of stream as opposed to the begginning. 

Can someone point me in the right direction as to how wireshark is doing this? 

Where is the reassembly information is being stored? and where is the reassembly is taking place(tcp or http?) Where is it keeping track of all this? (pinfo?)