[sanqui]

Unfortunately, in my experience Wireshark sometimes fails to reassemble TCP streams after a retransmission or out-of-order event, despite the presence of a checkbox to do just that...

[guardiangod]

I wrote a pcap re-orderer (with scapy) just for this bug.