Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 9044] "Follow TCP Stream" show only first HTTP req+res

[bugzilla-daemon@xxxxxxxxxxxxx]

Vojtech Vobr changed bug 9044

What	Removed	Added
CC		vojtech@vobr.net

Comment # 7 on bug 9044 from Vojtech Vobr

(In reply to comment #6)
> Please tell me that follow_tcp.c doesn't duplicate the HTTP processing code
> that the HTTP dissector has.

I'm afraid that it tries to duplicate the HTTP processing code. Some problems I
can see in the code, patch from comment 5 doesn't seem to fix most of them

 - it doesn't handle Keep-Alive connections (might be workaround by the patch)
 - it doesn't handle HTTP pipelining (once gzip unpacking is set, the code
doesn't care about direction of the traffic)
 - no handling of chunked Transfer-Encoding

I think the easiest way how to fix this problem might be to revert changes from
bug 3528, because right now is Follow TCP stream unusable for HTTP traffic.

I also agree with Sake, that this functionality shouldn't be in Follow TCP
stream at all (I really want to see raw stream), it should be a separate item,
similar to Follow SSL stream.

---

      You are receiving this mail because:

• You are watching all bug changes.