Agreed but only partially. If the trace is taken on some SUN Solaris machines from which the TCP traffic is originating, then all sent TCP packets will probably have a bad TCP checksum.
It would be better to provide a preference parameter in the TCP handler allowing us to choose between ignoring and considering the TCP checksum errors altogether. Regards, Olivier > -----Original Message----- > From: Devin Heitmueller [mailto:[EMAIL PROTECTED] > > Shouldn't this be based in part on the result of the TCP checksum? If > the TCP checksum validation fails, the peer is going to discard the > packet and wait for a retransmit. In this case, we should probably be > dissecting the second packet, not the first. There is little value in > attempting to dissect a packet that fails the TCP checksum, > as it could > contain complete garbage.
