| Bug ID | 
          8857
           | 
        
        
          | Summary | 
          Dropped bytes in imap dissector
           | 
        
        
          | Classification | 
          Unclassified
           | 
        
        
          | Product | 
          Wireshark
           | 
        
        
          | Version | 
          1.11.x (Experimental)
           | 
        
        
          | Hardware | 
          x86
           | 
        
        
          | OS | 
          Ubuntu
           | 
        
        
          | Status | 
          UNCONFIRMED
           | 
        
        
          | Severity | 
          Minor
           | 
        
        
          | Priority | 
          Low
           | 
        
        
          | Component | 
          Dissection engine (libwireshark)
           | 
        
        
          | Assignee | 
          bugzilla-admin@wireshark.org
           | 
        
        
          | Reporter | 
          rrlrrlouw@gmail.com
           | 
        
      
        
        Created attachment 11081 [details]
pcap file illustrating bug
Build Information:
wireshark 1.11.0 (SVN Rev 49756 from /trunk)
Copyright 1998-2013 Gerald Combs <gerald@wireshark.org> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled (32-bit) with GTK+ 2.24.10, with Cairo 1.10.2, with Pango 1.30.0, with
GLib 2.32.3, with libpcap, with libz 1.2.3.4, without POSIX capabilities,
without libnl, without SMI, without c-ares, without ADNS, without Lua, without
Python, without GnuTLS, without Gcrypt, without Kerberos, without GeoIP,
without
PortAudio, with AirPcap.
Running on Linux 3.2.0-41-generic-pae, with locale en_ZA.UTF-8, with libpcap
version 1.3.0, with libz 1.2.3.4, without AirPcap.
Built using gcc 4.6.3.
--
When dissecting an imap packet the final few bytes in a byte stream are not
picked up by the dissector.
It seems to happen when a byte stream is carried over multiple packets and the
packet ends with just a few bits after the last line terminator (\r\n).
Attached is a pcap file reproducing the bug.
         
      
      
      You are receiving this mail because:
      
      
          - You are watching all bug changes.