This is our old Q&A Site. Please post any new questions and answers at

Request packets have referer field but sometimes there are like this "[truncated] Referer" Does [truncated] shows something?

asked 11 Mar '11, 12:07

A%20B's gravatar image

accept rate: 0%

When Wireshark puts [truncated] on a protocol tree item (such as the HTTP Referer field), it means that the field is longer than Wireshark's internal display limit (ITEM_LABEL_LENGTH==240) so the display (in the protocol tree) has been truncated.

In other words, if the Referer field is, say, 300 characters long, it will be truncated to 240 minus the length of the field description ("[truncated] Referer:").

[Update] Don't forget to drop by and Accept this answer if it answered your question.

permanent link

answered 11 Mar '11, 15:08

JeffMorriss's gravatar image

JeffMorriss ♦
accept rate: 27%

edited 09 Mar '12, 07:04

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 11 Mar '11, 12:07

question was seen: 3,181 times

last updated: 09 Mar '12, 07:04

p​o​w​e​r​e​d by O​S​Q​A