Wireshark-bugs: [Wireshark-bugs] [Bug 5011] New: Window Size not shown in Decode for SYN packets
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Thu, 15 Jul 2010 05:41:53 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5011

           Summary: Window Size not shown in Decode for SYN packets
           Product: Wireshark
           Version: 1.4.0
          Platform: x86-64
        OS/Version: Windows 7
            Status: NEW
          Severity: Normal
          Priority: Low
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: jasper.bongertz@xxxxxxxxxxxx


Build Information:
Version 1.4.0rc1 (SVN Rev 33190 from /trunk-1.4)

Copyright 1998-2010 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GTK+ 2.16.6, (64-bit) with GLib 2.22.4, with WinPcap (version
unknown), with libz 1.2.3, without POSIX capabilities, without libpcre, without
SMI, with c-ares 1.7.1, with Lua 5.1, without Python, with GnuTLS 2.8.5, with
Gcrypt 1.4.5, without Kerberos, with GeoIP, with PortAudio V19-devel (built Jun 
9 2010), with AirPcap.

Running on 64-bit Windows 7, build 7600, with WinPcap version 4.1.1 (packet.dll
version 4.1.0.1753), based on libpcap version 1.0 branch 1_0_rel0b (20091008),
GnuTLS 2.8.5, Gcrypt 1.4.5, without AirPcap.

Built using Microsoft Visual C++ 9.0 build 30729

Wireshark is Open Source Software released under the GNU General Public
License.

Check the man page and http://www.wireshark.org for more information.
--
Wireshark doesn't show the TCP window size for SYN packets in the decode pane,
while it is still shown in the info column of the packet list. The window size
is shown in all further packets; just the SYN packet has no decode for that
value while it is also visible in the hex code.

I checked this behaviour using 32bit and 64bit versions of Wireshark 1.4, and
tested also tshark and if the window scaling option has anything to do with it,
but the window size is always missing in SYN packets. Checked my test trace
against 1.2.9 stable, and the window size is decoded just fine.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.