Pcap with unusual packet ordering doesn't reassemble

Description

The attached PCAP does send traffic in an unusual order (namely the initial data packet appears after the FIN) but telnet did receive the information from the server.

Bro -r {file} Conn::default_extract=T did not extract the reply's contents, and the conn log says "missed bytes" when the bytes "missed" were simply received slightly after the FIN.

Environment

OS-X Yosmeite

Assignee

Unassigned

Reporter

Nicholas Weaver

Labels

None

External issue ID

None

Components

Affects versions

Priority

Normal
Configure