Ethereal-dev: [ethereal-dev] Bug in Data-count and Hex-Dump from ethereal

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: mario.wolff@xxxxxxxxx
Date: Thu, 23 Mar 2000 11:23:58 +0100

Dear developers of etherreal,
while trying your programm (more tethereal then ethereal) i have the
following problem, but first the content:
System: Linux 2.2.14 startet with an Suse6.2
GTK+ Version: 1.2.3
ethereal 0.8.4 with libpcap 0.4, with libz 1.1.3, with CMU SNMP (version
unknown)
tcpdump 3.4 with libpcap 0.4

- i captured the dataflow from a RAS to a WAP-Gateway with: tcpdump -i eth0
-w dump.log.
- i want to move the dump in a human readable file with : tethereal -r
dump.log -x -V > dump.readable
- less dump.readable tells me a data length of 26 Bytes (every unknown
UDP-Packet) and the hexdump shows this bytes
- but the UDP-part tells length of 505 bytes and tcpdump shows, with a
small binary-dump patch, that there is much more data
- i open the dump.log with ethereal and its the same!

i try to change to change :
#define END_OF_FRAME     (pi.captured_len - offset)
to :
#define END_OF_FRAME     (pi.captured_len)
but there is still the problem of losing bytes (now i can see 68 Bytes)

Maybe its only a small Problem! Thank you for your product and hope that
the next version is bugfree at this point.

Mario Wolff (wolff@xxxxxxxxxxxxx)

P.S.: Sorry for my "spezial" way of writing english. I now that´s buggy but
 its not my language.