 | 1 | initial version |
Protocol PDU's may be split over multiple transport layer segments and then reassembled by the receiver. Wireshark can do the same and show you the reassembled result.
When reassembly takes place (controlled by dissector preferences) you should see an entry in the packet details just above the "Hypertext Transfer Protocol" item showing the TCP segments (assuming HTTP over TCP) and packets that were reassembled to show the complete HTTP message.
