Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 2843] New: Bad PPP-Van Jacobson (VJ) dissection

[bugzilla-daemon@xxxxxxxxxxxxx]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2843

           Summary: Bad PPP-Van Jacobson (VJ) dissection
           Product: Wireshark
           Version: 0.99.6
          Platform: PC
        OS/Version: Windows XP
            Status: NEW
          Severity: Major
          Priority: High
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: joan@xxxxxxxxx


Build Information:
Version 0.99.6a (SVN Rev 22276)

Copyright 1998-2007 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GTK+ 2.10.12, with GLib 2.12.12, with WinPcap (version unknown),
with libz 1.2.3, with libpcre 6.4, with Net-SNMP 5.4, with ADNS, with Lua 5.1,
with GnuTLS 1.6.1, with Gcrypt 1.2.3, with MIT Kerberos, with PortAudio
PortAudio V19-devel, with AirPcap.

Running on Windows XP Service Pack 2, build 2600, without WinPcap, without
AirPcap.

Built using Microsoft Visual C++ 6.0 build 8804

--
Wireshark dissects incorrectly PPP packets with Van Jacobson (VJ) compression.
It adds 2 bytes to the real TCP data lenght and shows irreal TCP problems.

See attached example. It's a TCP connection working properly. File 'PPP' is the
machine with a PPP interface and file 'Lan' is the machine with an Ethernet
interface. The timestamps are not synchronized but packet numbers are
synchronized from packet 4. You can analyze the first TCP connection (port
50876->2404) from packets 6 to 28.


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.