Ethereal-dev: Re: [Ethereal-dev] ethereal crash on particular packet

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Andreas Ferber <af@xxxxxxxxxx>
Date: Fri, 14 Jun 2002 11:30:01 +0200
On Fri, Jun 14, 2002 at 05:56:58PM +1000, Peter Hawkins wrote:
> 
> Yes, your patch is a better fix than mine (and that's definitely the
> problem, I can reproduce it here).

Yes, the patch from Guy works fine here. Thanks.

> I don't know where he found that
> DNS packet but it's severely screwed up.

As I can see now with a fixed ethereal, the packet is only a part of a
big DNS response which is distributed across two TCP segments:

% dig 20.234.69.192.in-addr.arpa ptr

I extracted the full TCP conversation from my trace. You can find it
in the attached trace file, if someone wants to further analyze this
(I don't know much about the internals of ethereal, but I guess it's
hard to do protocol dissection across more than one packet at a
time?). See above how you can reproduce the big DNS answer.

Andreas
-- 
       Andreas Ferber - dev/consulting GmbH - Bielefeld, FRG
     ---------------------------------------------------------
         +49 521 1365800 - af@xxxxxxxxxx - www.devcon.net

Attachment: dns-request.dump
Description: Binary data