Wireshark-bugs: [Wireshark-bugs] [Bug 1503] SSLv2 record length and version shown wrong
Date: Tue, 3 Apr 2007 05:31:57 +0000 (GMT)
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1503





------- Comment #4 from sake@xxxxxxxxxx  2007-04-03 05:31 GMT -------
Created an attachment (id=601)
 --> (http://bugs.wireshark.org/bugzilla/attachment.cgi?id=601&action=view)
ssl.cap

Hi Richard,

Thank you for taking a look at my patch. I attached a sample capture file with
SSLv2, SSLv3, TLSv1 and auto (SSLv2-record-layer client-hello with TLSv1 as
maximum supported version) traffic.

To show you the behaviour I wanted to fix, please apply the following
color-filters to see that fields with multiple hf's are not filtered upon
correctly:

- highlight ssl.record -> compare frames 4 & 6 (SSLv2) to frames 44 & 46
(SSLv3). All have a field named ssl.record, but only frames 44 & 46 are
colored.

- highlight ssl.handshake.version -> compare frames 6, 44 & 46 which all have a
field called ssl.handshake.version. But only frame 46 is colored.

Cheers,


Sake


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.