Wireshark-bugs: [Wireshark-bugs] [Bug 11336] New: RTCP heuristic dissector only matches odd port
Date: Sat, 04 Jul 2015 03:51:13 +0000
Bug ID 11336
Summary RTCP heuristic dissector only matches odd port-number TURN ChannelData packets
Product Wireshark
Version 1.12.6
Hardware All
OS All
Status UNCONFIRMED
Severity Minor
Priority Low
Component Dissection engine (libwireshark)
Assignee bugzilla-admin@wireshark.org
Reporter hadrielk@yahoo.com

Build Information:
Wireshark 1.99.8 (v1.99.8rc0-230-gb0b027d from master)

Copyright 1998-2015 Gerald Combs <gerald@wireshark.org> and contributors.
License GPLv2+: GNU GPL version 2 or later
<http://www.gnu.org/licenses/old-licenses/gpl-2.0.html>
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with GTK+ 3.10.8, with Cairo 1.13.1, with Pango 1.36.3, with
libpcap, with POSIX capabilities (Linux), without libnl, with libz 1.2.8, with
GLib 2.40.2, with SMI 0.4.8, with c-ares 1.10.0, with Lua 5.2, with GnuTLS
2.12.23, with Gcrypt 1.5.3, with MIT Kerberos, with GeoIP, with PortAudio
V19-devel (built Feb 25 2014 21:09:53), without AirPcap.

Running on Linux 3.13.0-55-generic, with locale en_US.UTF-8, with libpcap
version 1.5.3, with libz 1.2.8, with GnuTLS 2.12.23, with Gcrypt 1.5.3.
Intel(R) Core(TM) i7-4980HQ CPU @ 2.80GHz

Built using gcc 4.8.4.
--
RTP and RTCP can be carried within TURN CannelData messages, or STUN/TURN Send
messages. The TURN message can be in UDP or TCP, of any port number (by default
the even port 3478).

But the RTCP heuristic dissector which looks inside the TURN ChannelData/Send
payload, will only match an odd port number packet.

Also, both RTP and RTCP should have preference settings to enable/disable
heuristic checking inside of STUN/TURN, separate from one for being straight on
UDP.


You are receiving this mail because:
  • You are watching all bug changes.