Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 3315] Segments of reassembled PDU's not saved when saving

Date: Mon, 19 Mar 2012 16:10:28 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3315

Alexandre Ferrieux <alexandre.ferrieux@xxxxxxxxxxxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |alexandre.ferrieux@orange-f
                   |                            |tgroup.com

--- Comment #22 from Alexandre Ferrieux <alexandre.ferrieux@xxxxxxxxxxxxxxxxxx> 2012-03-19 16:10:27 PDT ---
(In reply to comment #20)
> Turns out this wasn't quite as complicated as I had thought; I fixed it in
> r41216.  You can read the rather long checkin comment here:
> 
> http://anonsvn.wireshark.org/viewvc/viewvc.cgi?view=rev&revision=41216
> 
> It hasn't been tested on Windows yet (Windows uses a different Save-As dialog
> than other platforms).
> 
> It seems to work well for me with reassembled SCTP and TCP packets. 
> Reassembled IP packets "should" work but I didn't have any sample captures
> using IP fragmentation handy.
> 
> If you're interested (and it actually compiles ;-)), you can try it out after a
> few hours with one of the buildbot builds:
> 
> http://www.wireshark.org/download/automated/
> 
> Any feedback is welcome.

Here is your feedback: you are awesome !!!
WS is now usable with big SIP packets like those typically seen in IMS (yeah,
it took the cumulative work of several idiots to build a 2kb INVITE. But they
are a fact of life now.)

One important use case is to start from a huge "blind" capture mixing dozens of
unrelated dialogs, then focus on a single interesting one with proper
filtering, then ... try to export the filtered result. Before your fix, the
habit was to carry around the big .cap along with a text note saying "use this
filter". Now the Stone Age is over: thanks a million.

-Alex

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.