I found that cutting parts of the dump produced files which wireshark
loaded just fine.  Used this to locate a single frame causing a crash:

 tshark -R 'frame.number eq 22308' -r 
~/docs/hardware/sierra/mc7710/mc7710-firmware-upgrade-usbmon.dump -w 
/tmp/new.dump

bjorn@nemi:~$ wireshark -r /tmp/new.dump 
*** glibc detected *** wireshark: munmap_chunk(): invalid pointer: 
0x00007f62d2240b50 ***
Segmentation fault


tshark does not seem to have problems displying this frame:

bjorn@nemi:~$ tshark -Vx -r /tmp/new.dump 
Frame 1: 77 bytes on wire (616 bits), 77 bytes captured (616 bits) on interface 0
    Interface id: 0
    WTAP_ENCAP: 115
    Arrival Time: May 22, 2012 17:40:39.353960000 CEST
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1337701239.353960000 seconds
    [Time delta from previous captured frame: 0.000000000 seconds]
    [Time delta from previous displayed frame: 0.000000000 seconds]
    [Time since reference or first frame: 0.000000000 seconds]
    Frame Number: 1
    Frame Length: 77 bytes (616 bits)
    Capture Length: 77 bytes (616 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: usb:ppp:crtp]
USB URB
    URB id: 0xffff8801fc40a600
    URB type: URB_SUBMIT ('S')
    URB transfer type: URB_BULK (0x03)
    Endpoint: 0x01, Direction: OUT
        0... .... = Direction: OUT (0)
        .000 0001 = Endpoint value: 1
    Device: 21
    URB bus id: 2
    Device setup request: not relevant ('-')
    Data: present (0)
    URB sec: 1337701239
    URB usec: 353960
    URB status: Operation now in progress (-EINPROGRESS) (-115)
    URB length [bytes]: 13
    Data length [bytes]: 13
    [bInterfaceClass: Unknown (0xffff)]
Point-to-Point Protocol
    Protocol: RTP IPHC Full Header (0x0061)
RTP IPHC Full Header
    01.. .... = Flags: 8-bit Context Id (0x01)
    ..00 1001 = Generation: 9
    IP version is 13: the only supported version is 4

0000  00 a6 40 fc 01 88 ff ff 53 03 01 15 02 00 2d 00   ..@.....S.....-.
0010  77 b3 bb 4f 00 00 00 00 a8 66 05 00 8d ff ff ff   w..O.....f......
0020  0d 00 00 00 0d 00 00 00 00 00 00 00 00 00 00 00   ................
0030  00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00   ........@.......
0040  7e 61 d5 9f 49 98 c1 00 5a 00 40 00 75            ~a..I...Z.@.u


bjorn@nemi:~$ ls -l /tmp/new.dump 
-rw-r--r-- 1 bjorn bjorn 192 Jul  3 11:02 /tmp/new.dump
bjorn@nemi:~$ file /tmp/new.dump 
/tmp/new.dump: pcap-ng capture file - version 1.0
bjorn@nemi:~$ hexdump -C /tmp/new.dump 
00000000  0a 0d 0d 0a 30 00 00 00  4d 3c 2b 1a 01 00 00 00  |....0...M<+.....|
00000010  ff ff ff ff ff ff ff ff  04 00 0c 00 54 53 68 61  |............TSha|
00000020  72 6b 20 31 2e 38 2e 30  00 00 00 00 30 00 00 00  |rk 1.8.0....0...|
00000030  01 00 00 00 20 00 00 00  dc 00 00 00 ff ff 00 00  |.... ...........|
00000040  09 00 01 00 06 00 00 00  00 00 00 00 20 00 00 00  |............ ...|
00000050  06 00 00 00 70 00 00 00  00 00 00 00 a1 c0 04 00  |....p...........|
00000060  68 f2 2f d7 4d 00 00 00  4d 00 00 00 00 a6 40 fc  |h./.M...M.....@.|
00000070  01 88 ff ff 53 03 01 15  02 00 2d 00 77 b3 bb 4f  |....S.....-.w..O|
00000080  00 00 00 00 a8 66 05 00  8d ff ff ff 0d 00 00 00  |.....f..........|
00000090  0d 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 40 00 00 00  00 00 00 00 7e 61 d5 9f  |....@.......~a..|
000000b0  49 98 c1 00 5a 00 40 00  75 00 00 00 70 00 00 00  |I...Z.@.u...p...|
000000c0


Hope this helps reproducing the bug.



Bjørn

Attachment: new.dump
Description: Binary data

Reply via email to