Wireshark-bugs: [Wireshark-bugs] [Bug 11078] New: Wireshark fails to interpret iSCSI packets wit
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Tue, 24 Mar 2015 16:04:40 +0000
Bug ID 11078
Summary Wireshark fails to interpret iSCSI packets with large lun id (like 0x104d2)
Product Wireshark
Version unspecified
Hardware All
OS Windows 7
Status UNCONFIRMED
Severity Major
Priority Low
Component Dissection engine (libwireshark)
Assignee bugzilla-admin@wireshark.org
Reporter rahul_dev_agg@yahoo.co.in 

Build Information:
Paste the COMPLETE build information from "Help->About Wireshark", "wireshark
-v", or "tshark -v".
--

    If very large LUN ID value is used in iSCSi PDUs, wireshark fails to
interpret the packets and displays it as a TCP packet.

If big LUN ID is replaced with a small value using the following script,
wireshark displays the packets as iSCSI packets correctly.

sed -i -e 's#\x01\x04\xd2#\x00\x00\x00#g' <pcap file name>

Here, I replace all lun id value = 0x0104d2 with 0x00.

You are receiving this mail because:
  • You are watching all bug changes.