I noticed that for the http dissection, The http OK message is displayed at the end of stream as opposed to the begginning.
Can someone point me in the right direction as to how wireshark is doing this? Where is the reassembly information is being stored? and where is the reassembly is taking place(tcp or http?) Where is it keeping track of all this? (pinfo?) ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <[email protected]> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:[email protected]?subject=unsubscribe
