| Bug ID |
9364
|
| Summary |
Add HTTP content-length mismatch into expert info
|
| Classification |
Unclassified
|
| Product |
Wireshark
|
| Version |
1.8.2
|
| Hardware |
All
|
| OS |
All
|
| Status |
UNCONFIRMED
|
| Severity |
Enhancement
|
| Priority |
Low
|
| Component |
Dissection engine (libwireshark)
|
| Assignee |
[email protected]
|
| Reporter |
[email protected]
|
Created attachment 11949 [details]
Patch to add error expert info if HTTP payload is more than content-length
header value
Build Information:
I have downloaded wireshark-1.8.2 sources, since that is the version on my
Ubuntu (13.04).
--
If HTTP response contains "Content-Length: x" but the payload is actually more
than x bytes, then we use the lower (header) value.
At this time, we can add a "malformed-packet" error expert info.
This is useful because ADCs (application load balancers) stop tracking such
connections because the server is sending more than what it advertised. A
trace loaded on Wireshark with this change will show any such malformed
responses.
You are receiving this mail because:
- You are watching all bug changes.
