https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13938
Bug ID: 13938
Summary: RADIUS: Filter issue when Extended attributes defined
in dictionary
Product: Wireshark
Version: 2.4.0
Hardware: All
OS: All
Status: UNCONFIRMED
Severity: Major
Priority: Low
Component: Dissection engine (libwireshark)
Assignee: bugzilla-ad...@wireshark.org
Reporter: mareko.pal...@gmail.com
Target Milestone: ---
Build Information:
TShark (Wireshark) 2.4.0 (37e7d4b891 from master.el6-2.4)
Copyright 1998-2017 Gerald Combs <ger...@wireshark.org> and contributors.
License GPLv2+: GNU GPL version 2 or later
<http://www.gnu.org/licenses/old-licenses/gpl-2.0.html>
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled (64-bit) with libpcap, without POSIX capabilities, without libnl, with
GLib 2.44.1, with zlib 1.2.3, without SMI, without c-ares, with Lua 5.1.4, with
GnuTLS 3.5.11, with Gcrypt 1.4.5, with MIT Kerberos, without GeoIP, without
nghttp2, without LZ4, without Snappy, with libxml2 2.7.6.
Running on Linux 2.6.32-696.1.1.el6.x86_64, with Intel(R) Xeon(R) CPU
X3440 @ 2.53GHz (with SSE4.2), with 16072 MB of physical memory, with locale
en_US.UTF-8, with libpcap version 1.7.2, with GnuTLS 3.5.11, with Gcrypt 1.4.5,
with zlib 1.2.3.
Built using gcc 6.3.0.
--
This issue may be related to Bug 13745.
Since wireshark version 2.3 it seems that radius filter is not created when the
same dictionary entry is present in multiple dictionaries (official and
custom).
This was not a issue before, but can be fixed by removing duplicates from
custom dictionary.
Error is the following:
tshark: Some fields aren't valid:
radius.Alc_Subsc_ID_Str
The issue is when we have Extended attributes defined with the same id:
official dictionary:
VENDOR Alcatel-Lucent-Service-Router 6527
BEGIN-VENDOR Alcatel-Lucent-Service-Router
...
ATTRIBUTE Alc-Subsc-ID-Str 11 string
...
custom dictionary:
VENDOR Alcatel-IPD 6527
BEGIN-VENDOR Alcatel-IPD format=Extended-Vendor-Specific-1
...
ATTRIBUTE Alc-Ext-Attribute3 11 integer
...
I get the same error as above.
It seems that keyword "format=Extended-Vendor-Specific-1" is not recognized.
(This may be related to Bug 13745 which also does not work for me)
--
You are receiving this mail because:
You are watching all bug changes.___________________________________________________________________________
Sent via: Wireshark-bugs mailing list <wireshark-bugs@wireshark.org>
Archives: https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe
