Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

Wireshark can reassemble packets and does it, too, as long as the TCP setting "Allow Subdissectors to reassemble TCP streams" is enabled. You can tell by e.g. looking at the last packet of a HTTP response which will list all segments that are part of the answer in an additional section in the decode pane.

I assume you want Wireshark to reorder packets in the packet list though - this is not reassembly and can't be done. The packet list always shows the order of packets arriving at the time of the capture (assuming it's sorted by "No." column). You can't force it to reorder the packets according to sequence numbers.