Ethereal

Re: [Ethereal-users] Info column changed for (PSH, ACK) messages.
Google
 
Web Ethereal.com

Home | Introduction | Documentation | Lists | FAQ | Development | Wiki | Bugs

Ethereal-users: June 2006


Royce Fessenden wrote:
> When the TCP flags byte is 0x0018 (PSH, ACK)  PSH,ACK used to display in
> the info column.  Now it says, "TCP segment of a reassembled PDU".

It should do that only if some dissector thinks the data in the TCP
segment is for its protocol, and it's doing TCP reassembly.

> Was that a deliberate change?

Probably.  Perhaps support for a new protocol was added, so that, in older
versions of Ethereal, it didn't dissect the data past the TCP header, and
now it dissects it as some protocol.

> Is there any way to get the old display back?

Disable the dissector for that protocol.  You might have to turn TCP
reassembly off (it's one of the preferences for TCP) in order to determine
what the protocol is.



Powered by MHonArc 2.6.10