 | 1 | initial version |
The line "Content-Length: 23965264" in the HTTP header indicates that there are 23965264 bytes to be transferred. This calculates to 22.85 MB. This is more than the 22.7 MB that you were able to save. So either a) Wireshark did not see all bytes (do you see "previous segment not captured" messages when you filter on "tcp.analysis.flags and tcp.stream==XXX", where XXX is the TCP stream in which this upload occurs>) or b) all data is captured, but something went wrong in saving the data to file.
As you say there is no object under "Export... HTTP Objects", my bet is there is data missing and therefor Wireshark can't do the re-assembly and that means you can't save all data either.
Are you able to share the capture file or is there any sensitive data in it?
