https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15051

            Bug ID: 15051
           Summary: packet-tcp.c:3511: failed assertion "proto_desegment
                    && pinfo->can_desegment
           Product: Wireshark
           Version: unspecified
          Hardware: x86
                OS: Windows 7
            Status: UNCONFIRMED
          Severity: Major
          Priority: Low
         Component: TShark
          Assignee: bugzilla-ad...@wireshark.org
          Reporter: benton.wal...@jp.mcd.com
  Target Milestone: ---

Build Information:
Version 2.6.2 (v2.6.2-0-g1b3cedbc)

Copyright 1998-2018 Gerald Combs <ger...@wireshark.org> and contributors.
License GPLv2+: GNU GPL version 2 or later
<http://www.gnu.org/licenses/old-licenses/gpl-2.0.html>
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (32-bit) with GTK+ 2.24.23, with Cairo 1.10.2, with Pango 1.34.0, with
WinPcap (4_1_3), with GLib 2.38.0, with zlib 1.2.11, with SMI 0.4.8, with
c-ares
1.14.0, with Lua 5.2.4, with GnuTLS 3.4.11, with Gcrypt 1.7.6, with MIT
Kerberos, with MaxMind DB resolver, with nghttp2 1.14.0, with LZ4, with Snappy,
with libxml2 2.9.4, without PortAudio, with AirPcap, with SBC, with SpanDSP,
with bcg729.

Running on 32-bit Windows 7 Service Pack 1, build 7601, with Intel(R) Core(TM)
i5-6300U CPU @ 2.40GHz (with SSE4.2), with 3505 MB of physical memory, with
locale Japanese_Japan.932, with WinPcap version 4.1.3 (packet.dll version
4.1.0.2980), based on libpcap version 1.0 branch 1_0_rel0b (20091008), with
GnuTLS 3.4.11, with Gcrypt 1.7.6, without AirPcap, binary plugins supported (14
loaded).

Built using Microsoft Visual C++ 14.12 build 25835

Wireshark is Open Source Software released under the GNU General Public
License.

Check the man page and http://www.wireshark.org for more information.
--
I get multiple errors when trying to parse a 700MB file using TShark.
And it takes 28 minutes to load the same 700MB file using Wireshark.

The errors I get are as follows:

** (tshark.exe:776): WARNING **: Dissector bug, protocol DCERPC, in packet
78173
2:
C:\buildbot\wireshark\wireshark-2.6-32\windows-2016-x86\build\epan\dissectors
\packet-tcp.c:3511: failed assertion "proto_desegment && pinfo->can_desegment"

** (tshark.exe:776): WARNING **: Dissector bug, protocol DCERPC, in packet
78220
5:
C:\buildbot\wireshark\wireshark-2.6-32\windows-2016-x86\build\epan\dissectors
\packet-tcp.c:3511: failed assertion "proto_desegment && pinfo->can_desegment"

** (tshark.exe:776): WARNING **: Dissector bug, protocol DCERPC, in packet
78286
1:
C:\buildbot\wireshark\wireshark-2.6-32\windows-2016-x86\build\epan\dissectors
\packet-tcp.c:3511: failed assertion "proto_desegment && pinfo->can_desegment"

** (tshark.exe:776): WARNING **: Dissector bug, protocol DCERPC, in packet
78312
1:
C:\buildbot\wireshark\wireshark-2.6-32\windows-2016-x86\build\epan\dissectors
\packet-tcp.c:3511: failed assertion "proto_desegment && pinfo->can_desegment"

** (tshark.exe:776): WARNING **: Dissector bug, protocol DCERPC, in packet
78687
2:
C:\buildbot\wireshark\wireshark-2.6-32\windows-2016-x86\build\epan\dissectors
\packet-tcp.c:3511: failed assertion "proto_desegment && pinfo->can_desegment"

** (tshark.exe:776): WARNING **: Dissector bug, protocol TDS, in packet 787699:
C:\buildbot\wireshark\wireshark-2.6-32\windows-2016-x86\build\epan\dissectors\pa
cket-tcp.c:3511: failed assertion "proto_desegment && pinfo->can_desegment"

I used to be able to open an 800MB file using wireshark in just over 1.5
minutes with previous version, now it takes 28 minutes to load a 700MB file.

TShark never gave off those errors in previous version, but they give them off
now and it also takes longer to parse the file due to the numerous errors.

-- 
You are receiving this mail because:
You are watching all bug changes.
___________________________________________________________________________
Sent via:    Wireshark-bugs mailing list <wireshark-bugs@wireshark.org>
Archives:    https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
             mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

Reply via email to