Wireshark-bugs: [Wireshark-bugs] [Bug 11458] New: Wireshark doesn't detect mismatched link-layer
Date: Fri, 21 Aug 2015 15:54:53 +0000
Bug ID 11458
Summary Wireshark doesn't detect mismatched link-layer protocol ID and IP version
Product Wireshark
Version Git
Hardware x86
OS All
Status UNCONFIRMED
Severity Normal
Priority Low
Component Dissection engine (libwireshark)
Assignee bugzilla-admin@wireshark.org
Reporter joao.valverde@tecnico.ulisboa.pt

Created attachment 13809 [details]
IPv6 over EtherType 0x0800

Build Information:
Wireshark 1.99.9 (v1.99.9rc0-322-ga5fe54d from unknown)

Copyright 1998-2015 Gerald Combs <gerald@wireshark.org> and contributors.
License GPLv2+: GNU GPL version 2 or later
<http://www.gnu.org/licenses/old-licenses/gpl-2.0.html>
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with GTK+ 3.16.6, with Cairo 1.14.2, with Pango 1.36.8, with
libpcap, with POSIX capabilities (Linux), with libnl 3, with libz 1.2.8, with
GLib 2.44.1, without SMI, without c-ares, without ADNS, with Lua 5.2, with
GnuTLS 3.4.3, with Gcrypt 1.6.3, with MIT Kerberos, with GeoIP, with PortAudio
V19-devel (built Jan 31 2014 21:19:35), without AirPcap.

Built using gcc 5.2.0.

--
For link-layers encapsulating IP that demultiplex between IPv4 and IPv6, e.g,
Ethernet II, Wireshark doesn't report to the user when the link-layer says it
has IPv4 but it is really encapsulating IPv6 (e.g, IPv6 over Ethertype 0x0800).

This should be an expert info warning IMO. See attached pcap.


You are receiving this mail because:
  • You are watching all bug changes.