This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

tcp segment of a reassembled PDU

0

In the captured packets(by wireshark),there are a lot of tcp segment of a reassembled PDU.the packet have data,but if i want export the packet out in a text file, in the text file i can not see the data?

asked 07 May '12, 06:09

yizhibi's gravatar image

yizhibi
1●2●2●3
accept rate: 0%

One Answer:

1

You can disable "Allow subdissector to reassemble TCP streams" in the TCP protocol preferences to prevent Wireshark to do reassembly at the TCP level.

answered 07 May '12, 06:40

SYN-bit's gravatar image

SYN-bit ♦♦
17.1k●9●57●245
accept rate: 20%

Thanks for your answer!If I disable this option,I can not get the reassembled data!I want to get every TCP segment when I export the packet out to the text file.What should I do?

(07 May '12, 19:00) yizhibi