See TCP_Reassembly for an example on how to use this to extract JPEG images from a capture. All but the smallest of responses will span multiple segments, so this preference should be checked if you expect to view the contents of the HTTP conversation. When this preference is enabled, then the HTTP dissector will reassemble the HTTP body if it has been transmitted over more than one TCP segment. Reassemble HTTP bodies spanning multiple TCP segments Although it is unusual for headers span multiple segments, it's not impossible, and this should be checked if you expect to view the contents of the HTTP conversation. When this preference is enabled, then the HTTP dissector will reassemble the HTTP header if it has been transmitted over more than one TCP segment. Reassemble HTTP headers spanning multiple TCP segments
0 Comments
Leave a Reply. |