Comment # 5
on bug 12132
from Alexis La Goutte
(In reply to Peter Wu from comment #3)
> Minimum reproducer:
>
> editcap -r session.full_anon.pcap pkts.pap 4-5
> tshark -r pkts.pap -2
>
> I guess it is related to the HTTP heuristics dissector which finds HTTP and
> changes the conversation dissector. Frame 4 is TLS while frame 5 is HTTP.
The question is what the better? HTTP heuristics or SSL ? ;-)
I think if the HTTP heuristics is disable, we see the SSL handshake ?
You are receiving this mail because:
- You are watching all bug changes.
