ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-users: Re: [Wireshark-users] How to view TCP responses

From: Steinar Bang <sb@xxxxxx>
Date: Wed, 09 Apr 2008 17:47:43 +0200
>>>>> Sake Blok <sake@xxxxxxxxxx>:

> You could either turn of reassembly (in the tcp protocol preferences
> or in the http protocol preferences) or install a more recent version
> of Wireshark (I'm not sure though in which version it was fixed, so
> you might want to go straight to the latest version, which is 1.0).

Unchecking "Allow subdissector to reassemble TCP streams" in the TCP
protocol preferences, made the response packets immediately appear in an
existing capture, so that did the trick for me.

Thanx!


- Steinar