This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

capture file on web http-google101.pcapng not similar to the one in Wireshark101 essentials book

0

It looks like the http-google101.pcapng capture does not look similar to the one in the Wireshark 101 essentials book. Please look at Frames 10 and 11. The book shows as getting valid response but the capture file has lot of TCP segmented PDU information

FYI>>>>>>>>>>>

asked 08 Apr '13, 16:07

rikshaw's gravatar image

rikshaw
11●2●2●3
accept rate: 0%

never mind!!!!!!!

(08 Apr '13, 16:08) rikshaw

2 Answers:

2

Go to Edit > Preferences > Protocols > TCP and un-check "Allow subdissector to reassemble TCP streams."

answered 08 Apr '13, 20:25

Jim%20Aragon's gravatar image

Jim Aragon
7.2k●7●33●118
accept rate: 24%

1

I suggest to ask the author of the book ;-)

http://wiresharkbook.com/contactus.html

Regards
Kurt

answered 08 Apr '13, 16:10

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k●10●39●237
accept rate: 15%