[tcpdump-workers] tcpdump display/decode bug?

I recently came across some packets which tcpdump appears to display incorrectly. Is tcpdump incorrectly invoking some heuristic dissector, or is there another reason? $ tcpdump -n -r tcpdump-error.pcap reading from file tcpdump-error.pcap, link-type EN10MB (Ethernet) 08:35:24.570337 vlan 506, p

Re: [tcpdump-workers] tcpdump display/decode bug?

On Jul 30, 2008, at 2:12 PM, Stephen Donnelly wrote: I recently came across some packets which tcpdump appears to display incorrectly. Is tcpdump incorrectly invoking some heuristic dissector, or is there another reason? I guess that's what I'd call it. tcpdump assumes that packets to or

Re: [tcpdump-workers] tcpdump display/decode bug?

On Wed, 2008-07-30 at 20:07 -0700, Guy Harris wrote: On Jul 30, 2008, at 2:12 PM, Stephen Donnelly wrote: I recently came across some packets which tcpdump appears to display incorrectly. Is tcpdump incorrectly invoking some heuristic dissector, or is there another reason? I guess