Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 2595] IMF dissection not working

Date: Tue, 10 Jun 2008 11:21:09 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2595





--- Comment #5 from Abhik Sarkar <sarkar.abhik@xxxxxxxxx>  2008-06-10 11:21:08 PDT ---
I had checked those preferences before reporting the bug... "Reassemble SMTP
DATA commands spanning multiple TCP segments" is checked. TCP sub-dissectors
are also allowed to re-assemble. 

But, strangely! On my PC tshark works:

Desktop>f:\wireshark-src\wireshark-gtk2\tshark -o "smtp.desegment_data: TRUE"
-r IMF.pcap.gz frame.number==69
 69   1.033354  192.168.1.4 -> 217.12.11.66 IMF from: "WShark User"
<xxxxxx@xxxx
x.co.uk>, subject: Test message for capture,  (text/plain) (text/plain)
(applica
tion/octet-stream)

It works even without explicitly turning on the option!
Desktop>f:\wireshark-src\wireshark-gtk2\tshark -r IMF.pcap.gz frame.number==69
 69   1.033354  192.168.1.4 -> 217.12.11.66 IMF from: "WShark User"
<xxxxxx@xxxx
x.co.uk>, subject: Test message for capture,  (text/plain) (text/plain)
(applica
tion/octet-stream)

But WS built in the same directory doesn't! It looks more like a config issue,
but  what could it be. The only differences in my copy of the branch are in
packet-smpp, so there is no way there could be a conflict...


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.