Ask Your Question

Revision history [back]

Likely to be because you're capturing on the local machine and the capture library acquires the packets before other layers in the network stack segment the TCP PDUs.

To see the "true" messages on the wire you need to capture off machine, e.g. using a tap, a switch mirror port or intermediate router that can create captures.