Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 4962] New: PATCH : Several small fixes to NetFlow decoding

[bugzilla-daemon@xxxxxxxxxxxxx]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4962

           Summary: PATCH : Several small fixes to NetFlow decoding
           Product: Wireshark
           Version: SVN
          Platform: Other
        OS/Version: All
            Status: NEW
          Severity: Normal
          Priority: Low
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: acferen@xxxxxxxxx


Created an attachment (id=4865)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=4865)
consolidated patch file.

Build Information:
wireshark 1.5.0 (SVN Rev 33384 from /trunk)

Copyright 1998-2010 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GTK+ 2.20.1, (64-bit) with GLib 2.24.1, with libpcap 1.0.0, with
libz 1.2.3.3, without POSIX capabilities, without libpcre, without SMI, without
c-ares, without ADNS, without Lua, without Python, without GnuTLS, without
Gcrypt, without Kerberos, without GeoIP, without PortAudio, without AirPcap.

Running on Linux 2.6.32-22-generic, with libpcap version 1.0.0, with libz
1.2.3.3.

Built using gcc 4.4.3.

--
1) the word "aggregation" is doubled in the description for V8PDU_TOSAS_METHOD
2) V9TEMPLATE_CACHE_MAX_ENTRIES had a value that was causing about 1/4 of the
hash buckets to be used.
3) V9TEMPLATE_MAX_FIELDS too small for a template I encountered.
4) V8PDU_TOSSRCPREFIX_METHOD incorrectly decodes 4 fields as dst instead of src
5) V8PDU_AS_METHOD and V8PDU_TOSPROTOPORT_METHOD don't decode the final 4 bytes
of each flow record.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.