https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12832
Michael Mann <[email protected]> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |RESOLVED CC| |[email protected] Resolution|--- |NOTABUG --- Comment #2 from Michael Mann <[email protected]> --- This is exactly how tcp.desegment_tcp_streams is supposed to work. Setting it to TRUE allows upper layer protocols (like iSCSI) to assembly packets over multiple frames. The reason packet Frame 2594 isn't identified as a response with tcp.desegment_tcp_streams = FALSE is that the "iSCSI response packet" takes up 50 frames. TCP will only reassemble that into a iSCSI packet when tcp.desegment_tcp_streams = TRUE. Otherwise it will just be treated as data since any one individual packet is not a complete iSCSI packet. -- You are receiving this mail because: You are watching all bug changes.
___________________________________________________________________________ Sent via: Wireshark-bugs mailing list <[email protected]> Archives: https://www.wireshark.org/lists/wireshark-bugs Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs mailto:[email protected]?subject=unsubscribe
