Ask Your Question

Revision history [back]

Missing TLS/HTTP reassembly of server replies

I'm looking at a traffic capture for an HTTPS connection that just repeatedly requests the same file from the server. If I follow the HTTP stream, I see all the client requests, but the server replies are missing. E.g. in the HTTP follow window I see:

.zRZI.GET /signals/10737/1574792548712.wav HTTP/1.1 Host: public-test-bucket-quatrix.s3.amazonaws.com User-Agent: HTTP.jl/1.5.0-DEV.623 Content-Length: 0

GET /signals/10737/1574792548712.wav HTTP/1.1 Host: public-test-bucket-quatrix.s3.amazonaws.com User-Agent: HTTP.jl/1.5.0-DEV.623 Content-Length: 0

(the first couple bytes are the tail of the first server response, which does get decoded properly). Is there some setting I'm missing that would make this work?

Capture of just this TCP stream available here: https://drive.google.com/open?id=133KP2zIYKdKeWX4ezkX4lhl5HpJRsdx_