Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] follow [tcp|ssl].stream with tshark

Date: Sun, 22 Nov 2015 16:17:44 +0100
On 151121-21:43+0100, miro.rovis@xxxxxxxxxxxxxxxxx wrote:
> On 151121-14:26+0100, miro.rovis@xxxxxxxxxxxxxxxxx wrote:
> A question even comes to mind if there is something buggy in how my
> tshark saves those streams...?
> 
Risking flac, I have to inform the list that, that while I wasn't able
to file a bug, which I tried to do very hard, on Wireshark Bugzilla (

and my screencasts of my tries and the corresponding network captures
identify as:
ec2df32bb1dcda040d0aef439d5e7b1069b04827c3b303096103d1000b59f233 dump_151122_1422_g0n.pcap
c9ee9e3b8da8135d7df99b3b7608cfba76a2a4c1bcc1254976620df61b2383eb Screen_151122_1422_g0n.mkv
74fec960ad69a9fb604b4e65a8bf5d1893622c8c1d4a6de29389ce72b57adb30 dump_151122_1435_g0n.pcap
af072c2c80e1b0651e87d96a2859ead615590bf4966f53a7410aa7ab80dab127 Screen_151122_1435_g0n.mkv

some analysis, of the traffic and why I couldn't file the bug, pending
),

I managed to file a bug with Gentoo Bugzilla.

Because this tshark saving raw streams in ascii file, does look like a
bug in Wireshark, so:

tshark (net-analyzer/wireshark-1.12.8-r1) saves tcp/ssl raw streams in
ascii file, content unrecoverable
https://bugs.gentoo.org/show_bug.cgi?id=566472

Cheers!
-- 
Miroslav Rovis
Zagreb, Croatia
http://www.CroatiaFidelis.hr

Attachment: signature.asc
Description: PGP signature