Wireshark-bugs: [Wireshark-bugs] [Bug 1346] New: udp dissector labels length as bonus for reasse
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Mon, 5 Feb 2007 06:13:04 +0000 (GMT)
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1346

           Summary: udp dissector labels length as bonus for reassembled ip
                    datagram
           Product: Wireshark
           Version: 0.99.5
          Platform: PC
        OS/Version: Windows 2000
            Status: NEW
          Severity: Normal
          Priority: Low
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: bob@xxxxxxxxxxxxxxx


Build Information:
Version 0.99.5 (SVN Rev 20677)

Copyright 1998-2007 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GTK+ 2.10.7, with GLib 2.12.7, with WinPcap (version unknown),
with libz 1.2.3, with libpcre 6.4, with Net-SNMP 5.4, with ADNS, with Lua 5.1,
with GnuTLS 1.6.1, with Gcrypt 1.2.3, with MIT Kerberos, with PortAudio
PortAudio V19-devel, with AirPcap.

Running on Windows 2000 Service Pack 4, build 2195, with WinPcap version 3.1
beta3 (packet.dll version 3, 1, 0, 23), based on libpcap version 0.8.1, without
AirPcap.

Built using Microsoft Visual C++ 6.0 build 8804

--
When analyzing large UDP packets fragmented into multiple IP packets, wireshark
labels the UDP length as bogus when it is not.  Specifically, the summary line
shows "[BAD UDP LENGTH 2064 > IP PAYLOAD LENGTH]" and the Packet Details pane
shows an error under User Datagram Protocol, "Length: 2064 (bogus, should be
584)".  The packets in question are UDP packets containing 2056 bytes of
payload data for a total IP packet size of 2084 bytes transported as two
Ethernet frames containing 1500 and 584 bytes.  The length 2064 is correct for
the data in question.  

This does not happen in Ethereal 0.10.14 on WinXP (full version info on
request).


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.