Wireshark mailing list archives

Re: TCP reassembly when packet capture size limited


From: Guy Harris <guy () alum mit edu>
Date: Tue, 16 Nov 2010 10:17:18 -0800


On Nov 16, 2010, at 9:58 AM, Stephen Fisher wrote:

Should TCP reassembly be done when the packet size was limited during 
capture?

Not unless we can do reassembly with "holes" in the result, which we currently can't do.  At least some other 
dissectors check to make sure, when adding data to the reassembled packet, that all the data they're adding is present.
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe


Current thread: