3 ms·
Sadly it's missing a native TCP-reassambly. Was caught by suprise by that recently, but there's always pyshark
by Flocular 4y ago
Sadly it's missing a native TCP-reassambly. Was caught by suprise by that recently, but there's always pyshark
- sanqui 4y agoUnfortunately, in my experience Wireshark sometimes fails to reassemble TCP streams after a retransmission or out-of-order event, despite the presence of a checkbox to do just that...
- guardiangod 4y agoI wrote a pcap re-orderer (with scapy) just for this bug.