Debian Bug report logs - #617344
wireshark: "follow TCP stream" doesn't indicate truncated data

version graph

Package: wireshark; Maintainer for wireshark is Balint Reczey <[email protected]>; Source for wireshark is src:wireshark (PTS, buildd, popcon).

Reported by: "Ph. Marek" <[email protected]>

Date: Tue, 8 Mar 2011 09:51:01 UTC

Severity: wishlist

Tags: moreinfo

Found in version wireshark/1.4.4-1

Full log


🔗 View this message in rfc822 format

X-Loop: [email protected]
Subject: Bug#617344: wireshark: "follow TCP stream" doesn't indicate truncated data
Reply-To: Philipp Marek <[email protected]>, [email protected]
Resent-From: Philipp Marek <[email protected]>
Resent-To: [email protected]
Resent-CC: Balint Reczey <[email protected]>
X-Loop: [email protected]
Resent-Date: Tue, 08 Mar 2011 11:48:04 +0000
Resent-Message-ID: <[email protected]>
Resent-Sender: [email protected]
X-Debian-PR-Message: followup 617344
X-Debian-PR-Package: wireshark
X-Debian-PR-Keywords: 
X-Debian-PR-Source: wireshark
Received: via spool by [email protected] id=B617344.129958473813588
          (code B ref 617344); Tue, 08 Mar 2011 11:48:04 +0000
Received: (at 617344) by bugs.debian.org; 8 Mar 2011 11:45:38 +0000
X-Spam-Checker-Version: SpamAssassin 3.2.5-bugs.debian.org_2005_01_02
	(2008-06-10) on busoni.debian.org
X-Spam-Level: 
X-Spam-Bayes: score:0.0000 Tokens: new, 10; hammy, 151; neutral, 80; spammy,
	0. spammytokens: hammytokens:0.000-+--H*UA:1.13.5, 0.000-+--H*u:1.13.5,
	0.000-+--H*UA:4.4.5, 0.000-+--H*u:4.4.5, 0.000-+--H*u:x86_64
X-Spam-Status: No, score=-5.5 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER,
	URIBL_CNKR autolearn=ham version=3.2.5-bugs.debian.org_2005_01_02
Received: from mail09.linbit.com ([212.69.161.110])
	by busoni.debian.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32)
	(Exim 4.69)
	(envelope-from <[email protected]>)
	id 1PwvMA-0003Wd-C2
	for [email protected]; Tue, 08 Mar 2011 11:45:38 +0000
Received: from cacao.localnet (unknown [10.9.9.57])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(No client certificate requested)
	by mail09.linbit.com (LINBIT Mail Daemon) with ESMTPSA id D448B10571C9;
	Tue,  8 Mar 2011 12:36:19 +0100 (CET)
From: Philipp Marek <[email protected]>
Organization: Linbit HA GmbH
To: [email protected]
Date: Tue, 8 Mar 2011 12:36:18 +0100
User-Agent: KMail/1.13.5 (Linux/2.6.34-1-amd64; KDE/4.4.5; x86_64; ; )
Cc: [email protected]
References: <[email protected]> <[email protected]> <[email protected]>
In-Reply-To: <[email protected]>
MIME-Version: 1.0
Content-Type: Text/Plain;
  charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Message-Id: <[email protected]>
X-Greylist: delayed 554 seconds by postgrey-1.31 at busoni; Tue, 08 Mar 2011 11:45:38 UTC
Hello Bálint,

thanks for the quick answer.

On Tuesday 08 March 2011, Bálint Réczey wrote:
> > Correction: It *does* show truncations (at least sometimes - I've
> > surely had data missing and didn't see the indicator).
> 
> Could you please attach the problematic capture file?
Hmmm, this one I can't attach.

Perhaps it's a bug regarding merging of multiple capture files, finding 
duplicates (see also #616415) and/or out-of-order packets ...

I'll try to get something to show.

 
> When working with truncated packets one has to be prepared for such
> problems. Every truncated packet is marked in tree-view:
...
> Display filter "short" will match those packets.
Thank you for this hint.
Well, but that does not work for simply missing packets.
 

> >> Another, smaller nuisance are the empty lines in hexdump output.
> > This is still true.
> Reported to upstream as:
> https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1678
Thank you.


Regards,

Phil




Send a report that this bug log contains spam.


Debian bug tracking system administrator <[email protected]>. Last modified: Tue May 13 17:51:18 2025; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU General Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.