Wireshark-bugs: [Wireshark-bugs] [Bug 8533] New: tshark "-T fields" output of bundled SCTP chunk
Date: Wed, 27 Mar 2013 18:27:02 +0000
Bug ID 8533
Summary tshark "-T fields" output of bundled SCTP chunks does not delimit empty fields.
Classification Unclassified
Product Wireshark
Version 1.8.4
Hardware x86
OS All
Status UNCONFIRMED
Severity Major
Priority Low
Component TShark
Assignee bugzilla-admin@wireshark.org
Reporter brian.wills@gmail.com

Created attachment 10484 [details]
Example of bundled diameter messages.

Build Information:

--
When outputting the contents of a packet containing multiple SCTP data chunks,
empty fields are not delimited.

tshark -r frame31.cap -T fields -e diameter.Result-Code -e
diameter.Error-Message

3004,2001,3004    DIAM-ERR-3004306 :Unable to allocate an internal resource:
Ptm Connection queue was full.
Loc=selectConnectionFromRouteList,DIAM-ERR-3004306 :Unable to allocate an
internal resource: Ptm Connection queue was full.
Loc=selectConnectionFromRouteList


Parsing these results would incorrectly pair the third chunk's error message
with the second chunk which does not have one.

3004>DIAM-ERR-3004306 :Unable to allocate an internal resource: Ptm Connection
queue was full. Loc=selectConnectionFromRouteList
2001>DIAM-ERR-3004306 :Unable to allocate an internal resource: Ptm Connection
queue was full. Loc=selectConnectionFromRouteList
3004>

When it should be:
3004>DIAM-ERR-3004306 :Unable to allocate an internal resource: Ptm Connection
queue was full. Loc=selectConnectionFromRouteList
2001>
3004>DIAM-ERR-3004306 :Unable to allocate an internal resource: Ptm Connection
queue was full. Loc=selectConnectionFromRouteList


You are receiving this mail because:
  • You are watching all bug changes.