For the same packet within the same PCAP file, By using different version of Wireshark tool, I can see different log view. Issue is not seen on Wireshark Version 1.10.0 but seen on recent version such as latest 2.0.1 Example: // Wireshark Version 2.0.1 20 24.0 DTE DCE 0x002d 12 PPP Van Jacobson Compressed TCP/IP (0x002d) // Wireshark Version 1.10.0, this is good 20 2016-02-17 10:01:18.6 14.31.22.16 121.15.143.92 12 TCP 35075 > hbci [PSH, ACK] Seq=1 Ack=1 Win=16384 [TCP CHECKSUM INCORRECT] Len=7 Can you please let me know if there is any settings relate to this. I checked Edit -> Preference -> Protocols -> PPP, <decompressed vj-compressed="" frames=""> is already checked asked 17 Feb '16, 21:46  stephennnuaa edited 17 Feb '16, 21:47 |
2 Answers:
Please file a bug on the Wireshark Bugzilla and attach the capture to the file. answered 18 Feb '16, 00:24  Guy Harris ♦♦ |
The code to handle Van Jacobson compression was removed from Wireshark, starting with the 1.12 release, due to concerns about its license. See bug 12138. answered 18 Feb '16, 05:23 Guy Harris ♦♦ |
Thanks Harris, I will file the bug report shortly