tcp segment of a reassembled PDU

0	In the captured packets(by wireshark),there are a lot of tcp segment of a reassembled PDU.the packet have data,but if i want export the packet out in a text file, in the text file i can not see the data? tcp-segment asked 07 May '12, 06:09 yizhibi 1●2●2●3 accept rate: 0%

One Answer:

oldest newest most voted

You can disable "Allow subdissector to reassemble TCP streams" in the TCP protocol preferences to prevent Wireshark to do reassembly at the TCP level.

link

answered 07 May '12, 06:40

SYN-bit ♦♦
12.3k●8●42●176
accept rate: 18%

Thanks for your answer!If I disable this option,I can not get the reassembled data!I want to get every TCP segment when I export the packet out to the text file.What should I do?

(07 May '12, 19:00) yizhibi

Your answer

toggle preview

community wiki

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

*italic* or _italic_
**bold** or __bold__
link:[text](http://url.com/ "Title")
image?![alt text](/path/img.jpg "Title")
numbered list: 1. Foo 2. Bar
to add a line break simply add two spaces to where you would like the new line to be.
basic HTML tags are also supported

learn more about Markdown

Tags:

tcp-segment ×2

Asked: 07 May '12, 06:09

Seen: 1,110 times

Last updated: 07 May '12, 19:00

tcp segment of a reassembled PDU

Follow this question

You have a trillion packets.

You need to see four of them.

Don't have Wireshark?

Related questions