Wireshark-users: Re: [Wireshark-users] TCP Decoding differences between Ethereal 0.99 and Wireshark 0.99.3/4?

From: Stephen Fisher <stephentfisher@xxxxxxxxx>
Date: Wed, 1 Nov 2006 11:52:40 -0800

On Tue, Oct 31, 2006 at 11:50:40PM -0500, Small, James wrote:

> Except--when I follow the TCP stream with Ethereal 0.99, this works 
> great.  However, when I do the same thing with Wireshark 0.99.3/4 
> (I've tried 0.99.3 and just uninstalled/re-installed 0.99.4), the 
> password does not appear in the ASCII/Raw decoding screens.

This appears to be related to bug #1043:

  http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1043

The work-around has caused the last character of each packet to be 
dropped, which is where the username and password characters are in a 
telnet session.


Steve