Wireshark-bugs: [Wireshark-bugs] [Bug 11451] GOOSE pdu (BER payload) is marked as 3 bytes shorte
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Tue, 01 Sep 2015 09:51:19 +0000

Comment # 2 on bug 11451 from 
As you already mentioned, the ASN.1 BER decoding is correct, just the
highlighting of the "goosePDU" node (under GOOSE) is 3 bytes shorter

The mentioned Option (Edit -> Preferences -> Protocol -> BER -> show internal
BER encapsulation tokens) does not change the highlighted region: reproduced
with the sequence below.

How to reproduce:
1) Load the PCAP from the example at
https://wiki.wireshark.org/SampleCaptures?action="">
2) click on the first (GOOSE) packet and expand the tree
3) select GOOSE/Reserved2 Node (bytes 00 00)
4) select GOOSE/goosePDU Node (bytes 80 1a ....)

Between the bytes 00 00(Reserved2) and the highlighted goosePDU bytes there are
0x61 0x81 0x86 which also show be shown as part of the goosePDU.

Please specify which extra information do you need in order to reproduce the
issue?

You are receiving this mail because:
  • You are watching all bug changes.