Wireshark-bugs: [Wireshark-bugs] [Bug 11597] New: ETHERNET FCS INCORRECT flagged incorrectly for
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Fri, 16 Oct 2015 02:18:12 +0000
Bug ID 11597
Summary ETHERNET FCS INCORRECT flagged incorrectly for [ACK] and [SYN, ACK] frames from Melsec QJ71E71-100
Product Wireshark
Version 1.12.8
Hardware x86
OS Windows 7
Status UNCONFIRMED
Severity Trivial
Priority Low
Component Dissection engine (libwireshark)
Assignee bugzilla-admin@wireshark.org
Reporter fieldbus_network@yahoo.co.jp 

Created attachment 13912 [details]
One [ACK] and one [SYN, ACK] frame from QJ71E71-100

Build Information:
Version 1.12.8 (v1.12.8-0-g5b6e543 from master-1.12)

Copyright 1998-2015 Gerald Combs <gerald@wireshark.org> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with GTK+ 2.24.23, with Cairo 1.10.2, with Pango 1.34.0, with
GLib 2.38.0, with WinPcap (4_1_3), with libz 1.2.5, with SMI 0.4.8, with c-ares
1.9.1, with Lua 5.2, without Python, with GnuTLS 3.2.15, with Gcrypt 1.6.2,
without Kerberos, with GeoIP, with PortAudio V19-devel (built Oct 14 2015),
with
AirPcap.

Running on 64-bit Windows 7 Service Pack 1, build 7601, with WinPcap version
4.1.3 (packet.dll version 4.1.0.2980), based on libpcap version 1.0 branch
1_0_rel0b (20091008), GnuTLS 3.2.15, Gcrypt 1.6.2, without AirPcap.
       Intel(R) Core(TM) i5-3340M CPU @ 2.70GHz, with 8054MB of physical
memory.


Built using Microsoft Visual C++ 10.0 build 40219

Wireshark is Open Source Software released under the GNU General Public
License.

Check the man page and http://www.wireshark.org for more information.
--
Captures for Melsec Programmable Logic Controller's QJ71E71-100 Module show the
[ACK] and [SYN, ACK] frames flagged as [ETHERNET FRAME CHECK SEQUENCE
INCORRECT]. Mitsubishi Electric technical support responded to my inquiry about
this issue that their device is padding these responses so they are all 64
bytes long and that the Wireshark dissector is incorrectly flagging those
responses as having incorrect FCS. The response from the Mitsubishi Electric
technical support says the Ethernet frame coming from QJ71E71-100 are standard.

You are receiving this mail because:
  • You are watching all bug changes.