Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 12339] New: Malformed Packet: RTP

[bugzilla-daemon@xxxxxxxxxxxxx]

Bug ID	12339
Summary	Malformed Packet: RTP
Product	Wireshark
Version	2.0.2
Hardware	x86
OS	Windows 7
Status	UNCONFIRMED
Severity	Major
Priority	Low
Component	Dissection engine (libwireshark)
Assignee	bugzilla-admin@wireshark.org
Reporter	carlos.velasco@nimastelecom.com

Created attachment 14478 [details]
Sample capture

Build Information:
Compiled (64-bit) with Qt 5.3.2, with WinPcap (4_1_3), with libz 1.2.8, with
GLib 2.42.0, with SMI 0.4.8, with c-ares 1.9.1, with Lua 5.2, with GnuTLS
3.2.15, with Gcrypt 1.6.2, with MIT Kerberos, with GeoIP, with QtMultimedia,
with AirPcap.
--
Dissection of RTP patcket fails with Malformed Packet (Exception occurred).
But I don't think the packet is malformed. All checksum are ok.

Attaching a sample capture of 3 packets from one stream (MPEG-TS).

In packet 2 dissection fails. Looking into this packet, at 46h I see first
MPEG-TS header: 0x47406511
Second one at 102h: 0x47006512

I think the problem could be the 40h in the header. According to Partial
Transport Stream Packet Format this means that Payload Unit Start Indicator is
set.

Payload Unit Start Indicator     1     0x400000     Set when a PES, PSI, or
DVB-MIP packet begins immediately following the header.

So, could be a problem with dissector and PUSI?

---

      You are receiving this mail because:

• You are watching all bug changes.