Wireshark-bugs: [Wireshark-bugs] [Bug 5052] New: Good ZigBee Beacon detected as malformed
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5052
Summary: Good ZigBee Beacon detected as malformed
Product: Wireshark
Version: 1.2.9
Platform: x86
OS/Version: Ubuntu
Status: NEW
Severity: Normal
Priority: Low
Component: Wireshark
AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
ReportedBy: szaboga@xxxxx
Created an attachment (id=4963)
--> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=4963)
PCAP file with the problenmatic Beacon
Build Information:
Version 1.2.9
Copyright 1998-2010 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled with GTK+ 2.20.1, (32-bit) with GLib 2.24.1, with libpcap 1.0.0, with
libz 1.2.3.3, with POSIX capabilities (Linux), with libpcre 7.8, with SMI
0.4.8,
with c-ares 1.7.0, with Lua 5.1, with GnuTLS 2.8.5, with Gcrypt 1.4.4, with MIT
Kerberos, with GeoIP, with PortAudio V19-devel (built Feb 18 2010 22:31:30),
without AirPcap.
Running on Linux 2.6.34-zb1, with libpcap version 1.0.0, GnuTLS 2.8.5, Gcrypt
1.4.4.
Built using gcc 4.4.3.
Wireshark is Open Source Software released under the GNU General Public
License.
Check the man page and http://www.wireshark.org for more information.
--
I checked the ZigBee Beacon format in the specification and I think the
dissector can't handle correctly the Beacon. Maybe the problem is the missing
TxOffset field at the end of the packet but in my understanding that is
optional.
107 2010-07-26 08:04:40.641459 0x0000 ZigBee Beacon, Src:
0x0000, EPID: 00:1d:40:00:00:30:00:73[Malformed Packet]
0000 00 80 11 38 10 00 00 ff cf 00 00 00 21 84 73 00 ...8........!.s.
0010 30 00 00 40 1d 00 0..@..
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
