Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: [Wireshark-dev] [PATCH] RFC: Handling and reassembling TCP Out-Of-Order packets

From: Max Dmitrichenko <dmitrmax@xxxxxxxxx>
Date: Mon, 30 May 2011 04:27:30 +0400
Hi!

I've just submitted a patch [1] to the bugzilla and wish to discuss it here.

The patch was born after the discussion [2] happened about a month
ago. There we came to the conclusion that everything works fine until
application level PDU is fragmented and the first fragment is lost and
retransmitted later. This situation is extremely painful for the
protocols which use encryption, because it breaks everything.

I tried to implement it without changing the current behavior for
dissectors which are unaware of this feature.

I guess such a core change won't go to the upcoming 1.6.0, but I would
be happy to see it in the 1.7.0 or may be
in 1.6.1 - you decide.

[1] https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5971
[2] http://www.wireshark.org/lists/wireshark-dev/201105/msg00039.html

--
Max