Royce Fessenden wrote: > When the TCP flags byte is 0x0018 (PSH, ACK) PSH,ACK used to display in > the info column. Now it says, "TCP segment of a reassembled PDU". It should do that only if some dissector thinks the data in the TCP segment is for its protocol, and it's doing TCP reassembly. > Was that a deliberate change? Probably. Perhaps support for a new protocol was added, so that, in older versions of Ethereal, it didn't dissect the data past the TCP header, and now it dissects it as some protocol. > Is there any way to get the old display back? Disable the dissector for that protocol. You might have to turn TCP reassembly off (it's one of the preferences for TCP) in order to determine what the protocol is.
Powered by MHonArc 2.6.10