Ethereal-dev: Re: [Ethereal-dev] ethereal crash on particular packet

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Ronnie Sahlberg" <sahlberg@xxxxxxxxxxxxxxxx>
Date: Sat, 15 Jun 2002 07:44:59 +1000
From: "Andreas Ferber" 
Sent: Friday, June 14, 2002 7:30 PM
Subject: Re: [Ethereal-dev] ethereal crash on particular packet


> As I can see now with a fixed ethereal, the packet is only a part of a
> big DNS response which is distributed across two TCP segments:

> (I don't know much about the internals of ethereal, but I guess it's
> hard to do protocol dissection across more than one packet at a
> time?). See above how you can reproduce the big DNS answer.

It is actually very easy to dissect a PDU that spans multiple frames.
For, DNS, just enable DNS-desegment... and TCP-allow-subdissector...
in Edit/Preferences/Protocols/TCP and DNS