This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Tshark command-line option to change TCP preferences

0

Hi guys,

I am swathi. I have on doubt.

what is Tshark command to disable and enable for "Allow subdissector to reassemble TCP streams"?

Regards, Swathi.

asked 04 Feb '16, 07:07

swathi%20jakkam's gravatar image

swathi jakkam
6●7●7●8
accept rate: 0%

edited 04 Feb '16, 13:47

JeffMorriss's gravatar image

JeffMorriss ♦
6.2k●5●72

One Answer:

1

You need to override a preference setting for this, using the "-o" parameter:

tshark -o tcp.desegment_tcp_streams:FALSE

tshark -o tcp.desegment_tcp_streams:TRUE

answered 04 Feb '16, 07:12

Jasper's gravatar image

Jasper ♦♦
23.8k●5●51●284
accept rate: 18%

edited 04 Feb '16, 07:12

Thanks,Jasper In wireshrk I am facing another issues.

I am sending HTTP requests for same url, So I am getting HTTP responses. But In Some HTTP responses Info field as "HTTP/1.1 403 Forbidden (text/html)" and Some Http responses Info field as "Continuation or non-

HTTP traffic".But data is seeing as TCP segments.Can u guys tell me the reason and solution about this issue.

Regards, Swathi.

(04 Feb '16, 23:36) swathi jakkam

@swathi jakkam, your last comment is a separate question almost unrelated to the original one, so please do create a new Question of it (you should be able to use "convert to question" on your own comments to save you some typing).

(05 Feb '16, 01:18) sindy