search

odedshimon / BruteShark

Network Analysis Tool
GNU General Public License v3.0
3.02k stars 332 forks source link

Error in getting Data of tcpsession #123

Open qq1176914912 opened 2 years ago

qq1176914912 commented 2 years ago

I use your method to get the data data of tcpsession as shown in the figure 1 When encountering [TCP Previous segment not captured] and [TCP Out-Of-Order] in wireshark, there is a problem. In order to obtain data with a length of 67 bytes, "TCP Previous segment not captured" should be obtained first, but I obtained The data does not get this data, but gets the data of the "[TCP Out-Of-Order]" TCP payload (1460 bytes) on both sides, in wireshark "TCP Out-Of-Order" shows that there is no "data" "of. The screenshot of "TCP Previous segment not captured" is as follows %Q_~6 {9B0TEP{8Q81{A%58 Screenshot of "TCP Out-Of-Order", as follows _L9){WLVP EPQ3LRKNZ4_U6 A screenshot of the data I printed, as shown below, the TCP Out-Of-Order on both sides is printed EVJSRPER`PP$L(40)V9PO%A this is the packet gmzta.zip

odedshimon commented 2 years ago

@qq1176914912 Thank you. Marked this as "Help Wanted" issue since I'm not sure when I will get to it. Feel free to send a Pull Request if you want to fix it.