發(fā)現(xiàn)一個 HTTP????? Continuation or non-HTTP traffic的數(shù)據(jù)包，之前沒有碰到過。不懂其意義，一看長度，顯示1460，與TCP segment of a reassembled PDU有點類似，對于這個字段的意義，GOOGLE了一會，發(fā)現(xiàn)有如下的解釋：

--------------------------------------------------------------------------------------------------

On Mon, May 29, 2006 at 12:37:41PM +0200, Pierre-Yves LE BIHAN wrote:?
>?
> I've analysed traffic between a W200 workstation and a W2K3 server;?
> I find frames with this information "continuation or non-http traffic".

?

That means ethereal sees packets on tcp port 80 which don't contain?an http header. This is quite common,?since many http-objects are larger than 1 tcp packet.?Hence the comment "Continuation".?You can?probably see an http-packet before those "continuations".

It also means you have some re-assembly settings turned off. Either?the "reassemble http headers" and "reassemble http bodies" options?are turned off in the http protocol preferences and/or the "allow subdissector to reassemble tcp streams" option is turned off in the?tcp protocol preferences.?

If they were all turned on, you would have seen "tcp segment of a?eassembled PDU" frames, ending in a http frame, containing the?
whole http-request or http-response.

--------------------------------------------------------------------------------------------------------

轉載于:https://www.cnblogs.com/kernel-style/p/3323475.html

總結

以上是生活随笔為你收集整理的HTTP Continuation or non-HTTP traffic的全部內容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網站內容還不錯，歡迎將生活随笔推薦給好友。