Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 2985] New: Reassembling of segmented TPKT/COTP packets

Date: Tue, 21 Oct 2008 01:17:28 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2985

           Summary: Reassembling of segmented TPKT/COTP packets
           Product: Wireshark
           Version: SVN
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Normal
          Priority: Low
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: MartinL@xxxxxxxxxxx


Created an attachment (id=2381)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=2381)
packet_segmentation.pcap

Build Information:

--
I worry that no one ever complaint about this. The MMS Protocol uses TPKT/COTP
as one of its underlying layers. On large messages COTP makes sure the packets
are split into the via handshake arranged size. But on TCP/IP some packages
could be joined by the Nagle algorithm. These packages are correctly displayed
as TPKT continuation data packages. If then the last COTP segment is
transmitted, the complete message could not be rebuild and the reassembled data
is shown crumbled. In the attached sample this happens over the frames 12-20.


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.