[Wireshark-bugs] [Bug 15707] Wireshark fails on piped/streamed pcapng packet capture data with mixed BE/LE SHBs, but reads mixed BE/LE files correctly

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15707 --- Comment #13 from TheDiveO --- Thank you for clarifying! -- You are receiving this mail because: You are watching all bug changes.___ Sent via:Wireshark-bugs

[Wireshark-bugs] [Bug 15709] ISAKMP: Segmentation fault with non-hex string for IKEv1 Decryption Table Initiator Cookie

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15709 --- Comment #10 from Gerrit Code Review --- Change 33157 merged by Anders Broman: Qt: do not expose a UAT record if the update callback fails https://code.wireshark.org/review/33157 -- You are receiving this mail because: You are

[Wireshark-bugs] [Bug 15777] `tshark -G folders`leaves mmdbresolve process behind

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15777 --- Comment #2 from Gerrit Code Review --- Change 33196 merged by Anders Broman: mmdbresolve: Improve our main loop check. https://code.wireshark.org/review/33196 -- You are receiving this mail because: You are watching all bug

[Wireshark-bugs] [Bug 15780] Dissector bug, protocol TLS - failed assertion "data"

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15780 --- Comment #3 from Gerrit Code Review --- Change 33203 had a related patch set uploaded by Peter Wu: TLS: fix DISSECTOR_ASSERT for zero-length records fragments https://code.wireshark.org/review/33203 -- You are receiving this mail

[Wireshark-bugs] [Bug 15780] Dissector bug, protocol TLS - failed assertion "data"

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15780 Peter Wu changed: What|Removed |Added Ever confirmed|0 |1

[Wireshark-bugs] [Bug 15707] Wireshark fails on piped/streamed pcapng packet capture data with mixed BE/LE SHBs, but reads mixed BE/LE files correctly

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15707 --- Comment #12 from Gerrit Code Review --- Change 33198 had a related patch set uploaded by Guy Harris: Don't pretend we can handle multiple-section pcapng files when we can't. https://code.wireshark.org/review/33198 -- You are

[Wireshark-bugs] [Bug 15779] --ext-config --extcap-interface called twice when opening extcap configuration dialog

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15779 Tomasz Mon changed: What|Removed |Added Component|Extras |Qt UI -- You are receiving this

[Wireshark-bugs] [Bug 15779] --ext-config --extcap-interface called twice when opening extcap configuration dialog

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15779 --- Comment #2 from Tomasz Mon --- "foo --extcap-config --extcap-interface foobar" is called twice also when you double click on interface that does not have valid configuration saved in preferences (and thus the configuration dialog

[Wireshark-bugs] [Bug 15779] --ext-config --extcap-interface called twice when opening extcap configuration dialog

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15779 --- Comment #1 from Tomasz Mon --- The first time "foo --extcap-config --extcap-interface foobar" is called from InterfaceFrame::on_interfaceTree_clicked() inside the extcap_has_configuration(). The second time "foo --extcap-config

[Wireshark-bugs] [Bug 15707] Wireshark fails on piped/streamed pcapng packet capture data with mixed BE/LE SHBs, but reads mixed BE/LE files correctly

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15707 --- Comment #11 from Guy Harris --- (In reply to TheDiveO from comment #8) > Do I correctly understand your analysis in that when using extcap/piping, > the machine capturing packets and the Wireshark machine needs to be both of > the

[Wireshark-bugs] [Bug 15707] Wireshark fails on piped/streamed pcapng packet capture data with mixed BE/LE SHBs, but reads mixed BE/LE files correctly

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15707 --- Comment #10 from Guy Harris --- (In reply to Tomasz Mon from comment #4) > Could you please provide some mixed-endian pcapng file that contains some > actual data packets? ...because that probably won't work. The current code does

[Wireshark-bugs] [Bug 15779] --ext-config --extcap-interface called twice when opening extcap configuration dialog

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15779 Tomasz Mon changed: What|Removed |Added CC||deso...@gmail.com

[Wireshark-bugs] [Bug 15707] Wireshark fails on piped/streamed pcapng packet capture data with mixed BE/LE SHBs, but reads mixed BE/LE files correctly

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15707 --- Comment #9 from Guy Harris --- (In reply to TheDiveO from comment #0) > - le-shb.pcapng: contains a single SHB in LE, with interface block also in > BE. Presumably meaning "also in LE", as running Wireshark in "Fileshark mode" (start

[Wireshark-bugs] [Bug 15707] Wireshark fails on piped/streamed pcapng packet capture data with mixed BE/LE SHBs, but reads mixed BE/LE files correctly

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15707 Guy Harris changed: What|Removed |Added Attachment #17066|contains a single SHB in|contains a single SHB in

[Wireshark-bugs] [Bug 15775] Qt version doesn't allow picking in Appearance > Font and Colors

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15775 --- Comment #6 from Gerald Combs --- (In reply to Guy Harris from comment #3) > > *Most* of the sample boxes can be clicked to get a color dialog with a > recent build, from the master branch, on macOS; however, the boxes for > "Sample

[Wireshark-bugs] [Bug 15775] Qt version doesn't allow picking in Appearance > Font and Colors

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15775 --- Comment #5 from Richard Berke --- Created attachment 17124 --> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=17124=edit Wireshark 3.0.1 QT color picker dialogue -- You are receiving this mail because: You are watching all

[Wireshark-bugs] [Bug 15777] `tshark -G folders`leaves mmdbresolve process behind

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15777 --- Comment #1 from Gerrit Code Review --- Change 33196 had a related patch set uploaded by Gerald Combs: mmdbresolve: Improve our main loop check. https://code.wireshark.org/review/33196 -- You are receiving this mail because: You are

[Wireshark-bugs] [Bug 15775] Qt version doesn't allow picking in Appearance > Font and Colors

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15775 --- Comment #4 from Guy Harris --- (In reply to Richard Berke from comment #0) > My 'spur' to try adjusting the colors was that the 'active selected item' > row doesn't appear with the white text on medium-dark blue background as the >

[Wireshark-bugs] [Bug 15775] Qt version doesn't allow picking in Appearance > Font and Colors

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15775 Guy Harris changed: What|Removed |Added Hardware|x86 |All Summary|Appearance >

[Wireshark-bugs] [Bug 15759] elastic-mapping wrong field names

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15759 --- Comment #8 from Gerrit Code Review --- Change 33099 merged by Dario Lombardo: elastic: make fields all the same. https://code.wireshark.org/review/33099 -- You are receiving this mail because: You are watching all bug

[Wireshark-bugs] [Bug 15776] Add support for GELF protocol

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15776 --- Comment #2 from Slava --- Created attachment 17123 --> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=17123=edit pcap with different zlib compression levels -- You are receiving this mail because: You are watching all bug

[Wireshark-bugs] [Bug 15775] Appearance > Font and Colors - no longer allows picking

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15775 --- Comment #2 from Richard Berke --- Created attachment 17122 --> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=17122=edit Wireshark 2.6.5 color picker displayed Version 2.6.5 (v2.6.5-0-gf766965a) Color picker displays

[Wireshark-bugs] [Bug 15781] editcap writes wrong version of self

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15781 Dario Lombardo changed: What|Removed |Added Status|UNCONFIRMED |RESOLVED Resolution|---

[Wireshark-bugs] [Bug 15731] In Wireshark 3.0, encrypted DOCSIS PDU packets no longer match the filter "eth.dst"

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15731 Alexis La Goutte changed: What|Removed |Added Status|IN_PROGRESS |RESOLVED

[Wireshark-bugs] [Bug 15731] In Wireshark 3.0, encrypted DOCSIS PDU packets no longer match the filter "eth.dst"

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15731 --- Comment #5 from Gerrit Code Review --- Change 33042 merged by Alexis La Goutte: docsis: fix for encrypted DOCSIS PDU packets do not match the filter 'eth.dst' https://code.wireshark.org/review/33042 -- You are receiving this mail

[Wireshark-bugs] [Bug 15781] editcap writes wrong version of self

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15781 --- Comment #1 from Dario Lombardo --- This is actually happening when writing pcapng files. -- You are receiving this mail because: You are watching all bug

[Wireshark-bugs] [Bug 15782] New: LaunchDaemon runs an unsigned executable

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15782 Bug ID: 15782 Summary: LaunchDaemon runs an unsigned executable Product: Wireshark Version: 3.0.1 Hardware: x86 OS: Mac OS X 10.4 Status: UNCONFIRMED

[Wireshark-bugs] [Bug 15780] Dissector bug, protocol TLS - failed assertion "data"

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15780 --- Comment #1 from Alexis La Goutte --- Hi Felix, it is possible to attach all this TCP session ? because i don't get error when open the pcap (and force to use SSL/TLS dissector) -- You are receiving this mail because: You are

[Wireshark-bugs] [Bug 15780] Dissector bug, protocol TLS - failed assertion "data"

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15780 Alexis La Goutte changed: What|Removed |Added CC||alexis.lagou...@gmail.com,

[Wireshark-bugs] [Bug 15781] New: editcap writes wrong version of self

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15781 Bug ID: 15781 Summary: editcap writes wrong version of self Product: Wireshark Version: Git Hardware: x86 OS: Linux Status: UNCONFIRMED Severity:

[Wireshark-bugs] [Bug 11743] Add FTDI USB dissector

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11743 Tomasz Mon changed: What|Removed |Added CC||deso...@gmail.com --- Comment #3

[Wireshark-bugs] [Bug 15780] New: Dissector bug, protocol TLS - failed assertion "data"

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15780 Bug ID: 15780 Summary: Dissector bug, protocol TLS - failed assertion "data" Product: Wireshark Version: 3.0.1 Hardware: x86-64 OS: Windows 7 Status:

[Wireshark-bugs] [Bug 15780] Dissector bug, protocol TLS - failed assertion "data"

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15780 Felix changed: What|Removed |Added CC||wiresh...@fschreiner.de -- You are

[Wireshark-bugs] [Bug 15774] PROFINET DCP access violation at DHCP client identifier crashes Wireshark

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15774 --- Comment #4 from Gerrit Code Review --- Change 33186 merged by Pascal Quantin: PROFINET DCP: fix dissection of an empty DHCP option https://code.wireshark.org/review/33186 -- You are receiving this mail because: You are watching all

[Wireshark-bugs] [Bug 15774] PROFINET DCP access violation at DHCP client identifier crashes Wireshark

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15774 Pascal Quantin changed: What|Removed |Added Resolution|--- |FIXED

[Wireshark-bugs] [Bug 15779] New: --ext-config --extcap-interface called twice when opening extcap configuration dialog

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15779 Bug ID: 15779 Summary: --ext-config --extcap-interface called twice when opening extcap configuration dialog Product: Wireshark Version: 3.0.1 Hardware: x86

[Wireshark-bugs] [Bug 15778] New: Buildbot crash output: fuzz-2019-05-11-20211.pcap

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15778 Bug ID: 15778 Summary: Buildbot crash output: fuzz-2019-05-11-20211.pcap Product: Wireshark Version: unspecified Hardware: x86-64 OS: Ubuntu Status:

[Wireshark-bugs] [Bug 15707] Wireshark fails on piped/streamed pcapng packet capture data with mixed BE/LE SHBs, but reads mixed BE/LE files correctly

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15707 --- Comment #8 from TheDiveO --- Do I correctly understand your analysis in that when using extcap/piping, the machine capturing packets and the Wireshark machine needs to be both of the same endianess? Is this correct? -- You are

[Wireshark-bugs] [Bug 15776] Add support for GELF protocol

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15776 Uli Heilmeier changed: What|Removed |Added Status|UNCONFIRMED |IN_PROGRESS Ever confirmed|0

[Wireshark-bugs] [Bug 15773] Enhance to support new FTTB related ANCP TLVs

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15773 --- Comment #6 from Uli Heilmeier --- I guess we should wait for an updated draft version. draft-lihawi-ancp-protocol-access-extension uses codes for ANCP TLV Types which are already assigned by IANA