ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 1271] rsync: "Follow TCP stream ..." is truncated

Date: Tue, 19 Dec 2006 23:49:07 +0000 (GMT)
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1271





------- Comment #2 from stephentfisher@xxxxxxxxx  2006-12-19 23:49 GMT -------
The problem appears to be that the PPPoE Session header says that there are
only 195 bytes of payload in the packet:

PPP:  2 bytes
IP:  20 bytes
TCP: 32 bytes
---------------
Total 54 bytes
Rsync: 195-54 = 141 bytes left over according to PPPoE.

The PPPoE session header is wrong because Wireshark says in the Frame section
that 471 bytes were captured.

Are you seeing a similar problem with any other protocols?


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.