Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 5351] New: RTMPT improvements

[bugzilla-daemon@xxxxxxxxxxxxx]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5351

           Summary: RTMPT improvements
           Product: Wireshark
           Version: SVN
          Platform: Other
        OS/Version: All
            Status: NEW
          Severity: Enhancement
          Priority: Low
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: jsethdev@xxxxxxxxxxxxxxxxxxxx


Build Information:
Paste the COMPLETE build information from "Help->About Wireshark", "wireshark
-v", or "tshark -v".
--
Improve RTMP dissection:

  * Handle multi-byte csids
  * Handle extended timestamps
  * Better timestamp defaulting/calculations
  * Dechunking should now cope with any clean high quality capture without
error (still loses sync on missing/out of order packets, but that's very hard
to deal with)
  * Dissect tunnelled RTMPT
  * Dissect more packet types
  * Dissect more AMF0 data types
  * Dissect audio/video control information
  * Use official packet/type names
  * Several new fields
  * Function call/response frame linking
  * Push several useful bits of data up the dissection tree or into the info
column for ease of use

Not (yet?) implemented:

  * AMF3 decoding (I've never seen this actually used: even the AMF command
packets contain wrapped AMF0 blobs, possibly needs specific ActionScript to
provoke)
  * Proper handling of Abort packets (never seen, though probably possible with
relayed RTMP connections that get dropped mid-packet)
  * Auto-recovery of synchronisation after packet loss (very hard!)


This version has had 50 hours of continuous fuzzing.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.