This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi,

I would like to ask to my issue. I cannot decode the SSL packet from server. I can see that Client sent Client Hello packet. Server sent "some" SSL response. After this response SSL handshake not continue. So I don't know where could be issue. here's my pcap:

https://www.cloudshark.org/captures/7abdbca762de

Thanks

Patrick

asked 20 May '15, 02:01

Patrik%20Kristel's gravatar image

Patrik Kristel
1111
accept rate: 0%


Some data is missing from the capture. In the 5 Second gap between frames 5 and 6 the server has sent some data that isn't in the capture. The clue is in the message "TCP previous segment not captured" message in frame 6.

Looking at the sequence number for frame 6, it's 2725, that means 2724 bytes of data are missing.

permanent link

answered 20 May '15, 03:29

grahamb's gravatar image

grahamb ♦
19.8k330206
accept rate: 22%

thanks for answer, but is there any reason that some data in capture missing?

(20 May '15, 03:45) Patrik Kristel

Where did you take this capture? Span Port, Client ...

(20 May '15, 03:53) Christian_R
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×319
×56
×44

question asked: 20 May '15, 02:01

question was seen: 1,633 times

last updated: 20 May '15, 03:54

p​o​w​e​r​e​d by O​S​Q​A