Wireshark-bugs: [Wireshark-bugs] [Bug 5846] A new dissector for uTorrent Transport Protocol
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Tue, 19 Apr 2011 17:23:27 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5846

--- Comment #4 from Bill Meier <wmeier@xxxxxxxxxxx> 2011-04-19 20:23:26 EDT ---
A question about the attached capture file:


Does the capture contain real, valid data ?

1. The values for the Window Size and the Sequence Numbers fields seem kind of
weird.

2. All the frames in the file from  219.85.150.76 (port 48493) appear to be
responses to frames from 59.108.116.180 (port 55267).

Each of those messages claims to have an extension type of 2 (Extension Bits).

However, as dissected, in each case the length of the field is 0.

Looking at the data it appears to me that in most of those frames a valid
Extension Bits field [00 08 00 00 00 00 00 00 00 00] does exist in the message
but following a 3 byte mystery field.

In some cases the frame just ends with the 3 byte mystery field and seems to be
missing the Extension Bits field altogether. 


Any thoughts ?

Is the spec referenced by Alex the latest ?

/* Specifications: BEP-0029
http://www.bittorrent.org/beps/bep_0029.html

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.