Michael Scott Mueller issues

Repositories
Issues
Comments

Results 6 issues of


                                            Michael Scott Mueller

The client end of the handshake may receive payload data after "server finished" message

Because of receive segment coalescing and other TCP/IP behaviors (e.g. Nagle's algorithm), it is possible for some data payload to be present in the extra data buffers on the client...

If Wireshark is connected while attempting to unload, the target application will crash.

Investigate "bytes captured" vs. actual data mismatches

Track named pipe server/client connection start

Add a Syn,Syn+ACK, ACK sequence into the stream to track the start of a given named pipe connection.

Record Named Pipe Disconnects

Add a disconnection sequence into the stream when a named pipe handle is closed.

Track multiple connections

Multiple named pipe connections should be tracked as separate trackable connections within WireShark