On Fri, Jan 10, 2014 at 12:56 PM, Stig Bjørlykke <[email protected]> wrote: > This commit introduced a bug where I always get > "[Malformed Packet: PRES]" in X.400 traffic.
Reassembly in RTSE is a bit special. The reassembly is done when receiving a SES "MAJOR SYNC POINT", as this indicates the end of the COTP DT Data stream. The payload for this pdu is empty, which results in a empty tvb being sent to RTSE (which then reassemble all previous received payloads). Updating the RTSE dissector to a new-style was done by returning tvb_length(tvb), which in this case is always 0. Returning 0 from a new-style dissector means this package was not for us, which is wrong in this case. I've added a fix for this in 54693. -- Stig Bjørlykke ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <[email protected]> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:[email protected]?subject=unsubscribe
