Wireshark-dev: [Wireshark-dev] [PATCH] RFC: Handling and reassembling TCP Out-Of-Order packets
From: Max Dmitrichenko <[email protected]>
Date: Mon, 30 May 2011 04:27:30 +0400

I've just submitted a patch [1] to the bugzilla and wish to discuss it here.

The patch was born after the discussion [2] happened about a month
ago. There we came to the conclusion that everything works fine until
application level PDU is fragmented and the first fragment is lost and
retransmitted later. This situation is extremely painful for the
protocols which use encryption, because it breaks everything.

I tried to implement it without changing the current behavior for
dissectors which are unaware of this feature.

I guess such a core change won't go to the upcoming 1.6.0, but I would
be happy to see it in the 1.7.0 or may be
in 1.6.1 - you decide.

[1] https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5971
[2] http://www.wireshark.org/lists/wireshark-dev/201105/msg00039.html