[Wireshark-bugs] [Bug 5525] BT L2CAP dissector does not handle several BT conversations
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5525 Andrei Emeltchenko andrei.emeltchenko.n...@gmail.com changed: What|Removed |Added Attachment #5682|review_for_checkin? | Flag|| Attachment #5682|0 |1 is obsolete|| --- Comment #8 from Andrei Emeltchenko andrei.emeltchenko.n...@gmail.com 2011-01-03 01:57:13 PST --- Created an attachment (id=5690) -- (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=5690) AVDTP L2CAP patch version 11 The last patch (Did not check yet with the latest SVN) -- Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. ___ Sent via:Wireshark-bugs mailing list wireshark-bugs@wireshark.org Archives:http://www.wireshark.org/lists/wireshark-bugs Unsubscribe: https://wireshark.org/mailman/options/wireshark-bugs mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe
[Wireshark-bugs] [Bug 5445] Enable Bluetooth profile dissection on top of L2CAP and RFCOMM
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5445 Andrei Emeltchenko andrei.emeltchenko.n...@gmail.com changed: What|Removed |Added CC||andrei.emeltchenko.n...@gma ||il.com --- Comment #11 from Andrei Emeltchenko andrei.emeltchenko.n...@gmail.com 2011-01-03 01:59:33 PST --- Hei, quite often in my traces l2cap SCID or/and DCID are reused for different PSMs. I've made a patch implementing some kind of l2cap bluetooth conversation tracking start, end and CIDs of such conversation. Could you check it in the bug 5690. -- Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. ___ Sent via:Wireshark-bugs mailing list wireshark-bugs@wireshark.org Archives:http://www.wireshark.org/lists/wireshark-bugs Unsubscribe: https://wireshark.org/mailman/options/wireshark-bugs mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe
[Wireshark-bugs] [Bug 5544] New: ICMPv6 Enchancements : Router Renumbering for IPv6 (RFC 2894)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5544 Summary: ICMPv6 Enchancements : Router Renumbering for IPv6 (RFC 2894) Product: Wireshark Version: SVN Platform: All OS/Version: All Status: NEW Severity: Enhancement Priority: Low Component: Wireshark AssignedTo: wireshark-bugs@wireshark.org ReportedBy: alexis.lagou...@gmail.com Created an attachment (id=5691) -- (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=5691) ICMPv6 - Router Renumbering for IPv6 (RFC 2894) Build Information: -- Hi A Patch to enchance the ICMPv6 Router Renumbering for IPv6 (RFC 2894) Dissector - Make RR field filterable - Add RR Result Message - ... The code is checked and fuzzed I joint also a sample for testing (there is not easy to find a sample of Router Renumbering... Who uses that ?) -- Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. ___ Sent via:Wireshark-bugs mailing list wireshark-bugs@wireshark.org Archives:http://www.wireshark.org/lists/wireshark-bugs Unsubscribe: https://wireshark.org/mailman/options/wireshark-bugs mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe
[Wireshark-bugs] [Bug 5544] ICMPv6 Enchancements : Router Renumbering for IPv6 (RFC 2894)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5544 Alexis La Goutte alexis.lagou...@gmail.com changed: What|Removed |Added Attachment #5692||review_for_checkin? Flag|| --- Comment #1 from Alexis La Goutte alexis.lagou...@gmail.com 2011-01-03 03:43:25 PST --- Created an attachment (id=5692) -- (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=5692) ICMPv6 - Enchancements Router Renumbering for IPv6 (RFC 2894) -- Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. ___ Sent via:Wireshark-bugs mailing list wireshark-bugs@wireshark.org Archives:http://www.wireshark.org/lists/wireshark-bugs Unsubscribe: https://wireshark.org/mailman/options/wireshark-bugs mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe
[Wireshark-bugs] [Bug 5544] ICMPv6 Enchancements : Router Renumbering for IPv6 (RFC 2894)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5544 Alexis La Goutte alexis.lagou...@gmail.com changed: What|Removed |Added Attachment #5691|ICMPv6 - Router Renumbering |ICMPv6 - Sample of Router description|for IPv6 (RFC 2894) |Renumbering for IPv6 (RFC ||2894) -- Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. ___ Sent via:Wireshark-bugs mailing list wireshark-bugs@wireshark.org Archives:http://www.wireshark.org/lists/wireshark-bugs Unsubscribe: https://wireshark.org/mailman/options/wireshark-bugs mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe
[Wireshark-bugs] [Bug 5545] New: Add support to EuroCableLabs at bootp opt 60 sub 23
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5545 Summary: Add support to EuroCableLabs at bootp opt 60 sub 23 Product: Wireshark Version: SVN Platform: All OS/Version: Windows 7 Status: NEW Severity: Minor Priority: Low Component: Wireshark AssignedTo: wireshark-bugs@wireshark.org ReportedBy: ha...@ti.com Created an attachment (id=5693) -- (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=5693) bootp opt 60 sub 23.patch Build Information: Version 1.5.0-PC20 (SVN Rev Unknown from unknown) Copyright 1998-2011 Gerald Combs ger...@wireshark.org and contributors. This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. Compiled (32-bit) with GTK+ 2.16.6, with GLib 2.24.2, with WinPcap (version unknown), with libz 1.2.3, without POSIX capabilities, without libpcre, with SMI 0.4.8, with c-ares 1.7.1, with Lua 5.1, without Python, with GnuTLS 2.8.5, with Gcrypt 1.4.5, with MIT Kerberos, with GeoIP, with PortAudio V19-devel (built Jan 3 2011), with AirPcap. Running on 64-bit Windows 7, build 7600, with WinPcap version 4.1.2 (packet.dll version 4.1.0.2001), based on libpcap version 1.0 branch 1_0_rel0b (20091008), GnuTLS 2.8.5, Gcrypt 1.4.5, without AirPcap. Built using Microsoft Visual C++ 9.0 build 30729 Wireshark is Open Source Software released under the GNU General Public License. Check the man page and http://www.wireshark.org for more information. -- Add support to EuroCableLabs at bootp opt 60 sub 23. according to PKT-SP-PROV1.5-I04-090624, paragraph 10.23 Device MIB Support: type 2 is indicating EuroCableLabs. -- Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. ___ Sent via:Wireshark-bugs mailing list wireshark-bugs@wireshark.org Archives:http://www.wireshark.org/lists/wireshark-bugs Unsubscribe: https://wireshark.org/mailman/options/wireshark-bugs mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe
[Wireshark-bugs] [Bug 5545] Add support to EuroCableLabs at bootp opt 60 sub 23
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5545 Hadar Shoham ha...@ti.com changed: What|Removed |Added Attachment #5693|application/octet-stream|text/plain mime type|| Attachment #5693|0 |1 is patch|| -- Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. ___ Sent via:Wireshark-bugs mailing list wireshark-bugs@wireshark.org Archives:http://www.wireshark.org/lists/wireshark-bugs Unsubscribe: https://wireshark.org/mailman/options/wireshark-bugs mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe
[Wireshark-bugs] [Bug 5534] WPS: Implements Primary Device Type decryption
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5534 Masashi Honma masashi.ho...@gmail.com changed: What|Removed |Added Attachment #5680|application/octet-stream|text/plain mime type|| Attachment #5680|0 |1 is patch|| -- Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. ___ Sent via:Wireshark-bugs mailing list wireshark-bugs@wireshark.org Archives:http://www.wireshark.org/lists/wireshark-bugs Unsubscribe: https://wireshark.org/mailman/options/wireshark-bugs mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe
[Wireshark-bugs] [Bug 5534] WPS: Implements Primary Device Type decryption
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5534 Masashi Honma masashi.ho...@gmail.com changed: What|Removed |Added Attachment #5680||review_for_checkin? Flag|| -- Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. ___ Sent via:Wireshark-bugs mailing list wireshark-bugs@wireshark.org Archives:http://www.wireshark.org/lists/wireshark-bugs Unsubscribe: https://wireshark.org/mailman/options/wireshark-bugs mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe
[Wireshark-bugs] [Bug 5534] WPS: Implements Primary Device Type decryption
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5534 Masashi Honma masashi.ho...@gmail.com changed: What|Removed |Added Attachment #5680|review_for_checkin? | Flag|| -- Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. ___ Sent via:Wireshark-bugs mailing list wireshark-bugs@wireshark.org Archives:http://www.wireshark.org/lists/wireshark-bugs Unsubscribe: https://wireshark.org/mailman/options/wireshark-bugs mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe
[Wireshark-bugs] [Bug 5534] WPS: Implements Primary Device Type decryption
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5534 Masashi Honma masashi.ho...@gmail.com changed: What|Removed |Added Attachment #5681||review_for_checkin? Flag|| -- Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. ___ Sent via:Wireshark-bugs mailing list wireshark-bugs@wireshark.org Archives:http://www.wireshark.org/lists/wireshark-bugs Unsubscribe: https://wireshark.org/mailman/options/wireshark-bugs mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe
[Wireshark-bugs] [Bug 5532] Crash on cancel sort
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5532 Jeff Morriss jeff.morriss...@gmail.com changed: What|Removed |Added Status|NEW |RESOLVED CC||jeff.morriss...@gmail.com Resolution||DUPLICATE --- Comment #1 from Jeff Morriss jeff.morriss...@gmail.com 2011-01-03 07:32:35 PST --- *** This bug has been marked as a duplicate of bug 5189 *** -- Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. ___ Sent via:Wireshark-bugs mailing list wireshark-bugs@wireshark.org Archives:http://www.wireshark.org/lists/wireshark-bugs Unsubscribe: https://wireshark.org/mailman/options/wireshark-bugs mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe
[Wireshark-bugs] [Bug 5189] Wireshark crashes when cancelling a large sort operation
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5189 Jeff Morriss jeff.morriss...@gmail.com changed: What|Removed |Added CC||dar...@live.com --- Comment #4 from Jeff Morriss jeff.morriss...@gmail.com 2011-01-03 07:32:36 PST --- *** Bug 5532 has been marked as a duplicate of this bug. *** -- Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. ___ Sent via:Wireshark-bugs mailing list wireshark-bugs@wireshark.org Archives:http://www.wireshark.org/lists/wireshark-bugs Unsubscribe: https://wireshark.org/mailman/options/wireshark-bugs mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe
[Wireshark-bugs] [Bug 5545] Add support to EuroCableLabs at bootp opt 60 sub 23
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5545 Jaap Keuter jaap.keu...@xs4all.nl changed: What|Removed |Added Attachment #5693||review_for_checkin+ Flag|| --- Comment #1 from Jaap Keuter jaap.keu...@xs4all.nl 2011-01-03 16:45:07 CET --- (From update of attachment 5693) I would drop it below case PKT_MDC_MIB_IETF. Another would be (for all these cases) to upgrade the bitfield parsing to use the applicable proto_tree functions. But that is for another patch. -- Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. ___ Sent via:Wireshark-bugs mailing list wireshark-bugs@wireshark.org Archives:http://www.wireshark.org/lists/wireshark-bugs Unsubscribe: https://wireshark.org/mailman/options/wireshark-bugs mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe
[Wireshark-bugs] [Bug 5542] Buildbot crash output: fuzz-2011-01-02-11684.pcap
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5542 --- Comment #2 from Jeff Morriss jeff.morriss...@gmail.com 2011-01-03 08:53:04 PST --- *** Bug 5543 has been marked as a duplicate of this bug. *** -- Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. ___ Sent via:Wireshark-bugs mailing list wireshark-bugs@wireshark.org Archives:http://www.wireshark.org/lists/wireshark-bugs Unsubscribe: https://wireshark.org/mailman/options/wireshark-bugs mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe
[Wireshark-bugs] [Bug 5543] Buildbot crash output: fuzz-2011-01-02-16491.pcap
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5543 Jeff Morriss jeff.morriss...@gmail.com changed: What|Removed |Added Status|NEW |RESOLVED CC||jeff.morriss...@gmail.com Resolution||DUPLICATE --- Comment #3 from Jeff Morriss jeff.morriss...@gmail.com 2011-01-03 08:53:04 PST --- Yep, looks the same as 5542. *** This bug has been marked as a duplicate of bug 5542 *** -- Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. ___ Sent via:Wireshark-bugs mailing list wireshark-bugs@wireshark.org Archives:http://www.wireshark.org/lists/wireshark-bugs Unsubscribe: https://wireshark.org/mailman/options/wireshark-bugs mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe
[Wireshark-bugs] [Bug 5537] Buildbot crash output: fuzz-2010-12-30-28473.pcap
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5537 Jeff Morriss jeff.morriss...@gmail.com changed: What|Removed |Added Status|NEW |RESOLVED CC||jeff.morriss...@gmail.com Resolution||FIXED --- Comment #1 from Jeff Morriss jeff.morriss...@gmail.com 2011-01-03 09:39:51 PST --- Fixed in rev 35342 and scheduled for 1.4.3. -- Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. ___ Sent via:Wireshark-bugs mailing list wireshark-bugs@wireshark.org Archives:http://www.wireshark.org/lists/wireshark-bugs Unsubscribe: https://wireshark.org/mailman/options/wireshark-bugs mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe
[Wireshark-bugs] [Bug 5542] Buildbot crash output: fuzz-2011-01-02-11684.pcap
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5542 Jeff Morriss jeff.morriss...@gmail.com changed: What|Removed |Added CC||jeff.morriss...@gmail.com --- Comment #3 from Jeff Morriss jeff.morriss...@gmail.com 2011-01-03 09:53:10 PST --- It doesn't crash for me on 64-bit Linux, but Valgrind complains thus: ==1009== Conditional jump or move depends on uninitialised value(s) ==1009==at 0x5EAB863: get_sdp_type (packet-btsdp.c:319) ==1009==by 0x5EAC2D2: dissect_sdp_service_attribute_list (packet-btsdp.c:563) ==1009==by 0x5EAC6F0: dissect_btsdp (packet-btsdp.c:632) ==1009==by 0x5D8F060: call_dissector_through_handle (packet.c:395) ==1009==by 0x5D8F7BF: call_dissector_work (packet.c:486) ==1009==by 0x5D90771: dissector_try_uint_new (packet.c:898) ==1009==by 0x5EA74E4: dissect_b_frame (packet-btl2cap.c:879) ==1009==by 0x5EA7A93: dissect_btl2cap (packet-btl2cap.c:1304) ==1009==by 0x5D8F060: call_dissector_through_handle (packet.c:395) ==1009==by 0x5D8F7BF: call_dissector_work (packet.c:486) ==1009==by 0x5D8F920: call_dissector (packet.c:1828) ==1009==by 0x5E9ED63: dissect_btacl (packet-bthci_acl.c:160) ==1009== ==1009== Conditional jump or move depends on uninitialised value(s) ==1009==at 0x5EAC1D0: dissect_sdp_service_attribute_list (packet-btsdp.c:578) ==1009==by 0x5EAC6F0: dissect_btsdp (packet-btsdp.c:632) ==1009==by 0x5D8F060: call_dissector_through_handle (packet.c:395) ==1009==by 0x5D8F7BF: call_dissector_work (packet.c:486) ==1009==by 0x5D90771: dissector_try_uint_new (packet.c:898) ==1009==by 0x5EA74E4: dissect_b_frame (packet-btl2cap.c:879) ==1009==by 0x5EA7A93: dissect_btl2cap (packet-btl2cap.c:1304) ==1009==by 0x5D8F060: call_dissector_through_handle (packet.c:395) ==1009==by 0x5D8F7BF: call_dissector_work (packet.c:486) ==1009==by 0x5D8F920: call_dissector (packet.c:1828) ==1009==by 0x5E9ED63: dissect_btacl (packet-bthci_acl.c:160) ==1009==by 0x5D8F060: call_dissector_through_handle (packet.c:395) -- Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. ___ Sent via:Wireshark-bugs mailing list wireshark-bugs@wireshark.org Archives:http://www.wireshark.org/lists/wireshark-bugs Unsubscribe: https://wireshark.org/mailman/options/wireshark-bugs mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe
[Wireshark-bugs] [Bug 5542] Buildbot crash output: fuzz-2011-01-02-11684.pcap
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5542 --- Comment #4 from Jeff Morriss jeff.morriss...@gmail.com 2011-01-03 09:55:41 PST --- The first of those errors is fixed in rev 35343. -- Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. ___ Sent via:Wireshark-bugs mailing list wireshark-bugs@wireshark.org Archives:http://www.wireshark.org/lists/wireshark-bugs Unsubscribe: https://wireshark.org/mailman/options/wireshark-bugs mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe
[Wireshark-bugs] [Bug 5542] Buildbot crash output: fuzz-2011-01-02-11684.pcap
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5542 Jeff Morriss jeff.morriss...@gmail.com changed: What|Removed |Added Status|NEW |RESOLVED Resolution||FIXED --- Comment #5 from Jeff Morriss jeff.morriss...@gmail.com 2011-01-03 10:49:02 PST --- Both Valgrind errors are now fixed in rev 35347. Hopefully that's it... -- Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. ___ Sent via:Wireshark-bugs mailing list wireshark-bugs@wireshark.org Archives:http://www.wireshark.org/lists/wireshark-bugs Unsubscribe: https://wireshark.org/mailman/options/wireshark-bugs mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe
[Wireshark-bugs] [Bug 5545] Add support to EuroCableLabs at bootp opt 60 sub 23
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5545 --- Comment #2 from Hadar Shoham hadar.sho...@gmail.com 2011-01-03 11:54:25 PST --- Created an attachment (id=5694) -- (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=5694) bootp opt 60 sub 23 ver 2.patch -- Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. ___ Sent via:Wireshark-bugs mailing list wireshark-bugs@wireshark.org Archives:http://www.wireshark.org/lists/wireshark-bugs Unsubscribe: https://wireshark.org/mailman/options/wireshark-bugs mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe
[Wireshark-bugs] [Bug 5545] Add support to EuroCableLabs at bootp opt 60 sub 23
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5545 Jaap Keuter jaap.keu...@xs4all.nl changed: What|Removed |Added Status|NEW |RESOLVED Resolution||FIXED --- Comment #3 from Jaap Keuter jaap.keu...@xs4all.nl 2011-01-03 22:40:27 CET --- Committed revision 35350. -- Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. ___ Sent via:Wireshark-bugs mailing list wireshark-bugs@wireshark.org Archives:http://www.wireshark.org/lists/wireshark-bugs Unsubscribe: https://wireshark.org/mailman/options/wireshark-bugs mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe
[Wireshark-bugs] [Bug 5541] Custom Window Size Column Shows Two Values and Doesn't Sort Properly
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5541 --- Comment #7 from Jim Aragon j...@agdatasystems.com 2011-01-03 20:55:40 PST --- (In reply to comment #5) I also added more details in the TCP Window Scale option output to now look like: Window scale: 8 (multiply by 256) Kind: Window Scale (3) Length: 3 Shift count: 8 [Multiplier: 256] Looks good. How about something like this: ...with scaling: Window size value: 258 --- tcp.window_size_value [Calculated window size: 66048 (scaled)] --- tcp.window_size ...without scaling: Window size value: 258 --- tcp.window_size_value [Calculated window size: 258]--- tcp.window_size So if I understand this correctly, there will once again be only a single instance of tcp.window_size and it will show the correct window size whether scaling is used or not? Does without scaling include the situation where Wireshark did not see the 3-way handshake, or does it only apply where Wireshark saw the 3-way handshake, and scaling was not used? Also, it appears to me that as part of these changes tcp.options.wscale_val was renamed to tcp.options.wscale.shift. If so, that will break some existing filters. On the web site for Laura Chappel's book, Wireshark Network Analysis, she has a number of sample configuration profiles available for download. All of her configuration profiles work fine on Wireshark 1.4.2. However, her NMAP Detection profile now throws the following error on Wireshark 1.5.0-SVN-35350: Could not compile color filter Nmap from saved filters. Neither 'tcp.options.wscale_val' nor '10' are field or protocol names. Manually editing the colorfilters file to replace tcp.options.scale_val with tcp.options.wscale.shift eliminates the error. -- Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. ___ Sent via:Wireshark-bugs mailing list wireshark-bugs@wireshark.org Archives:http://www.wireshark.org/lists/wireshark-bugs Unsubscribe: https://wireshark.org/mailman/options/wireshark-bugs mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe
[Wireshark-bugs] [Bug 5541] Custom Window Size Column Shows Two Values and Doesn't Sort Properly
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5541 --- Comment #8 from Stephen Fisher st...@stephen-fisher.com 2011-01-03 23:44:47 MST --- (In reply to comment #7) So if I understand this correctly, there will once again be only a single instance of tcp.window_size and it will show the correct window size whether scaling is used or not? Yes. Does without scaling include the situation where Wireshark did not see the 3-way handshake, or does it only apply where Wireshark saw the 3-way handshake, and scaling was not used? I was referring to cases where the 3-way handshake was not seen or when the scaling option wasn't used in the 3-way handshake. Basically: whenever Wireshark doesn't know. Also, it appears to me that as part of these changes tcp.options.wscale_val was renamed to tcp.options.wscale.shift. Previous to r34094 where I made these changes, the two filters were tcp.options.wscale (a boolean of whether the scaling option was present) and tcp.options.wscale_val (the shift count value). If so, that will break some existing filters. Yes, unfortunately Wireshark books are out of date the day they're printed... I chose to change wscale_val to wscale.shift for clarity and add the generated wscale.multiplier which was previously only a text note and not filterable/extractable. -- Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. ___ Sent via:Wireshark-bugs mailing list wireshark-bugs@wireshark.org Archives:http://www.wireshark.org/lists/wireshark-bugs Unsubscribe: https://wireshark.org/mailman/options/wireshark-bugs mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe
[Wireshark-bugs] [Bug 5541] Custom Window Size Column Shows Two Values and Doesn't Sort Properly
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5541 --- Comment #9 from Stephen Fisher st...@stephen-fisher.com 2011-01-03 23:48:55 MST --- (In reply to comment #6) (In reply to comment #5) The problem I had with the old implementation was that Wireshark showed the scaled value without even putting the [Generated item] brackets around it, and did not show the packet's actual value, leading to extra work and possible confusion when trying to figure out the packet's actual value. Indeed, it needed an update :-) I was also adding the type (kind) and length around the same time to various options so people like me who don't remember and those who don't know that is how TCP options are stored in the packet :). The only thing I'm missing is being able to interpret the window_size when it is the same as the size_value. This can be caused by three things: 2) The particular flow uses a scaling factor of 1 I hadn't thought of that case. 3) The 3WHS was not seen by wireshark and therefore it defaults to using the window_size_value as its best bet. For 1) and 2) the tcp.window_size show the correct value used by the two endpoints. For 3) the value might not represent the actual value being used by the endpoints. It would be nice to be able to distinguish this situation from the other two. Good point. This can be either done by changing the value itself (making it 0, -1 or -window_size_value), but that would confuse people I'm sure... So having a third field that reveals this info would be nice to have. If only people could think like computers :) Stephen, if you do the proposed extra field for tcp.window_size_value, I'll add the code for the extra tcp.window_size_scalefactor (unless someone really objects to it). Sure, I'll try to work on this in the morning when the brain is working full speed again. -- Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. ___ Sent via:Wireshark-bugs mailing list wireshark-bugs@wireshark.org Archives:http://www.wireshark.org/lists/wireshark-bugs Unsubscribe: https://wireshark.org/mailman/options/wireshark-bugs mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe
[Wireshark-bugs] [Bug 5544] ICMPv6 Enchancements : Router Renumbering for IPv6 (RFC 2894)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5544 Jaap Keuter jaap.keu...@xs4all.nl changed: What|Removed |Added Status|NEW |RESOLVED Resolution||FIXED --- Comment #2 from Jaap Keuter jaap.keu...@xs4all.nl 2011-01-04 08:45:01 CET --- Committed revision 35355. -- Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. ___ Sent via:Wireshark-bugs mailing list wireshark-bugs@wireshark.org Archives:http://www.wireshark.org/lists/wireshark-bugs Unsubscribe: https://wireshark.org/mailman/options/wireshark-bugs mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe
[Wireshark-bugs] [Bug 5323] LTP bug found by randpkt
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5323 Guy Harris g...@alum.mit.edu changed: What|Removed |Added Status|NEW |RESOLVED Resolution||FIXED --- Comment #2 from Guy Harris g...@alum.mit.edu 2011-01-03 23:49:52 PST --- Various changes to the code to dissect Report segments have fixed this. The changes are in the trunk, and will be scheduled for the 1.4 branch. -- Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. ___ Sent via:Wireshark-bugs mailing list wireshark-bugs@wireshark.org Archives:http://www.wireshark.org/lists/wireshark-bugs Unsubscribe: https://wireshark.org/mailman/options/wireshark-bugs mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe
