https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16044
Bug ID: 16044
Summary: Incorrect parsing of ieee1905 packet Unassociated STA
Link Metrics Query
Product: Wireshark
Version: 2.6.8
Hardware: x86
OS: Linux
Status: UNCONFIRMED
Severity: Major
Priority: Low
Component: Dissection engine (libwireshark)
Assignee: bugzilla-ad...@wireshark.org
Reporter: thangphu...@gmail.com
Target Milestone: ---
Created attachment 17322
--> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=17322&action=edit
Packet capture with parsing bug
Build Information:
Wireshark 2.6.8 (Git v2.6.8 packaged as 2.6.8-1~ubuntu16.04.0)
Copyright 1998-2019 Gerald Combs <ger...@wireshark.org> and contributors.
License GPLv2+: GNU GPL version 2 or later
<http://www.gnu.org/licenses/old-licenses/gpl-2.0.html>
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled (64-bit) with Qt 5.5.1, with libpcap, with POSIX capabilities (Linux),
with libnl 3, with GLib 2.48.2, with zlib 1.2.8, with SMI 0.4.8, with c-ares
1.10.0, with Lua 5.2.4, with GnuTLS 3.4.10, with Gcrypt 1.6.5, with MIT
Kerberos, with MaxMind DB resolver, with nghttp2 1.7.1, with LZ4, with Snappy,
with libxml2 2.9.3, with QtMultimedia, with SBC, with SpanDSP, without bcg729.
Running on Linux 4.4.0-159-generic, with Intel(R) Core(TM) i7-4790 CPU @
3.60GHz
(with SSE4.2), with 32117 MB of physical memory, with locale en_US.UTF-8, with
libpcap version 1.7.4, with GnuTLS 3.4.10, with Gcrypt 1.6.5, with zlib 1.2.8,
binary plugins supported (0 loaded).
Built using gcc 5.4.0 20160609.
--
The packet was parsed incorrectly. Based on the 17.2.25 spec in the Multi-AP
Specifications document. The field that is missing in the packet capture
displayed is the last 1 byte field with value m described as "Number of STA MAC
addresses for this channel". As shown in the packet capture attached, the STA
MAC address is: 01:40:4e:36:93:a9. When in reality, 0x01 is the value of Number
of STA MAC addresses for this channel, and the STA MAC address is actually
40:4e:36:93:a9:59.
--
You are receiving this mail because:
You are watching all bug changes.___________________________________________________________________________
Sent via: Wireshark-bugs mailing list <wireshark-bugs@wireshark.org>
Archives: https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe
