[Flocular]

Sadly it's missing a native TCP-reassambly. Was caught by suprise by that recently, but there's always pyshark

[sanqui]

Unfortunately, in my experience Wireshark sometimes fails to reassemble TCP streams after a retransmission or out-of-order event, despite the presence of a checkbox to do just that...

[guardiangod]

I wrote a pcap re-orderer (with scapy) just for this bug.