[Wireshark-bugs] [Bug 15708] [HTTP/2] HEADERS frame fails after Fast Retransmission

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15708

Youngje Kim  changed:

   What|Removed |Added

 Resolution|--- |NOTABUG
 Status|UNCONFIRMED |RESOLVED

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15708] [HTTP/2] HEADERS frame fails after Fast Retransmission

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15708

--- Comment #4 from Youngje Kim  ---
Hi. Peter.

I downloaded the same file again and opened it on another computer.
And I could not reproduce it.

I have compared the TCP, TLS, and HTTP2 options of both computers, there was a
difference in TLS.

On the computer that was being reproduced, the Message Authentication Code
(MAC), ignore "mac failed" option was enabled.

I've disabled this option so it looks good.

Sorry for the confusion.

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15065] Wireshark can call extcap with empty multicheck argument

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15065

--- Comment #5 from Gerrit Code Review  ---
Change 32887 merged by Anders Broman:
Qt: Do not turn empty parameter values into spaces

https://code.wireshark.org/review/32887

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 10578] IPv6 Mobility Option Mobile Node Link Layer Identifier Link-layer Identifier field is read beyond the option data

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10578

Guy Harris  changed:

   What|Removed |Added

   Hardware|x86-64  |All
 OS|Windows 7   |All

--- Comment #3 from Guy Harris  ---
So was this packet captured from a network, so that it should be valid, or is
it somewhat fuzzed/randomized for use as part of the testing?  Wireshark
reports a garbage string for the Service Selection option, and the payload
protocol for the Mobile IPv6 header is AH, not "no next protocol"; RFC 6275
says "Implementations conforming to this specification SHOULD set the payload
protocol type to IPPROTO_NONE (59 decimal)."

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15708] [HTTP/2] HEADERS frame fails after Fast Retransmission

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15708

--- Comment #3 from Peter Wu  ---
Hi Youngje,
I am unable to reproduce the issue with the attached capture.
Frames 443, 445, 447, 449, 451 and 453 seems to correspond with
frames 1445, 1447, 1449, 1451, 1453 and 1455.

Here, I see just plain "Application Data" for those frames while the original
frame (429) that is being retransmitted seems correct. Can you see the same
with the provided capture file? If not, please share your TCP protocol
preferences.

Tested with latest master and v3.0.1rc0-95-gb1e0e9a6 on Linux (essentially
3.0.1).

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15610] EtherNet/IP (CIP) dissector does not decode properly GetAttributeAll response for Ethernet Link Obj

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15610

Dylan  changed:

   What|Removed |Added

 Resolution|--- |FIXED
 Status|CONFIRMED   |RESOLVED

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15708] [HTTP/2] HEADERS frame fails after Fast Retransmission

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15708

Alexis La Goutte  changed:

   What|Removed |Added

 CC||alexis.lagou...@gmail.com,
   ||pe...@lekensteyn.nl

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 14159] Wireshark should bundle a Windows capture mechanism based on an up-to-date version of libpcap

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14159

Gerald Combs  changed:

   What|Removed |Added

 Status|CONFIRMED   |RESOLVED
 Resolution|--- |FIXED

--- Comment #5 from Gerald Combs  ---
Wireshark 3.0 ships with Npcap on Windows, which in turn ships with a recent
version of libpcap.

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15709] ISAKMP: Segmentation fault with non-hex string for IKEv1 Decryption Table Initiator Cookie

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15709

Uli Heilmeier  changed:

   What|Removed |Added

   See Also||https://bugs.wireshark.org/
   ||bugzilla/show_bug.cgi?id=15
   ||693

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15693] ISAKMP: not able to decode multiple RFC 6407 payloads(i.e. SA kEK, SAT, key download etc.)

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15693

Uli Heilmeier  changed:

   What|Removed |Added

   See Also||https://bugs.wireshark.org/
   ||bugzilla/show_bug.cgi?id=15
   ||709

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15709] ISAKMP: Segmentation fault with non-hex string for IKEv1 Decryption Table Initiator Cookie

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15709

Uli Heilmeier  changed:

   What|Removed |Added

 Status|CONFIRMED   |IN_PROGRESS

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15709] ISAKMP: Segmentation fault with non-hex string for IKEv1 Decryption Table Initiator Cookie

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15709

Uli Heilmeier  changed:

   What|Removed |Added

   Hardware|x86 |All
 OS|Mac OS X 10.4   |All

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15709] New: ISAKMP: Segmentation fault with non-hex string for IKEv1 Decryption Table Initiator Cookie

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15709

Bug ID: 15709
   Summary: ISAKMP: Segmentation fault with non-hex string for
IKEv1 Decryption Table Initiator Cookie
   Product: Wireshark
   Version: Git
  Hardware: x86
OS: Mac OS X 10.4
Status: UNCONFIRMED
  Severity: Major
  Priority: Low
 Component: Dissection engine (libwireshark)
  Assignee: bugzilla-ad...@wireshark.org
  Reporter: u...@heilmeier.eu
  Target Milestone: ---

Build Information:
Wireshark 3.0.0 (v3.0.0-0-g937e33de)

Compiled (64-bit) with Qt 5.12.1, with libpcap, without POSIX capabilities,
with
GLib 2.37.6, with zlib 1.2.8, with SMI 0.4.8, with c-ares 1.15.0, with Lua
5.2.4, with GnuTLS 3.4.17, with Gcrypt 1.7.7, with MIT Kerberos, with MaxMind
DB
resolver, with nghttp2 1.21.0, with LZ4, with Snappy, with libxml2 2.9.9, with
QtMultimedia, with SBC, with SpanDSP, with bcg729.

Running on Mac OS X 10.14.4, build 18E226 (Darwin 18.5.0), with Intel(R)
Core(TM) i5-6500 CPU @ 3.20GHz (with SSE4.2), with 16384 MB of physical memory,
with locale C, with libpcap version 1.8.1 -- Apple version 79.250.1, with
GnuTLS
3.4.17, with Gcrypt 1.7.7, with zlib 1.2.11, binary plugins supported (0
loaded).

Built using clang 4.2.1 Compatible Apple LLVM 10.0.0 (clang-1000.11.45.5).
--
After pasting a non-hex string as IKEv1 Decryption Table Initiator Cookie (see 
bug 15693) and saving it WS crashes with a segmentation fault:

Process:   Wireshark [85748]
Path:  /Applications/Wireshark.app/Contents/MacOS/Wireshark
Identifier:org.wireshark.Wireshark
Version:   3.0.0 (3.0.0)
Code Type: X86-64 (Native)
Parent Process:??? [1]
Responsible:   Wireshark [85748]
User ID:   502

Date/Time: 2019-04-18 11:42:05.154 +0200
OS Version:Mac OS X 10.14.4 (18E226)
Report Version:12
Anonymous UUID:699C678B-0763-2EB0-B6CC-4F6B26F4EEC6

Sleep/Wake UUID:   8DD62768-822F-4CB8-A32E-8DD16F875D9A

Time Awake Since Boot: 39 seconds
Time Since Wake:   440 seconds

System Integrity Protection: enabled

Crashed Thread:0  Dispatch queue: com.apple.main-thread

Exception Type:EXC_BAD_ACCESS (SIGSEGV)
Exception Codes:   KERN_INVALID_ADDRESS at 0x
Exception Note:EXC_CORPSE_NOTIFY

Termination Signal:Segmentation fault: 11
Termination Reason:Namespace SIGNAL, Code 0xb
Terminating Process:   exc handler [85748]

VM Regions Near 0:
--> 
__TEXT 00010ecba000-00010f301000 [ 6428K] r-x/rwx
SM=COW  /Applications/Wireshark.app/Contents/MacOS/Wireshark



Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   libwireshark.12.dylib   0x000110b52048 isakmp_init_protocol
+ 104 (packet-isakmp.c:5811)
1   libglib-2.0.0.dylib 0x000110241f6d g_slist_foreach + 45
(gslist.c:893)
2   libwireshark.12.dylib   0x0001115593e8 init_dissection + 40
(packet.c:331)
3   libwireshark.12.dylib   0x00011154efb4 epan_new + 68
(epan.c:386)
4   org.wireshark.Wireshark 0x00010f0041b4 rescan_packets + 356
5   org.wireshark.Wireshark 0x00010ee063b3
MainWindow::redissectPackets() + 67
6   org.qt-project.QtCore   0x000116e362c1
QObject::event(QEvent*) + 753
7   org.qt-project.QtWidgets0x00010f7fcf3a
QWidget::event(QEvent*) + 4746
8   org.qt-project.QtWidgets0x00010f90d0f5
QMainWindow::event(QEvent*) + 277
9   org.qt-project.QtWidgets0x00010f7c02cd
QApplicationPrivate::notify_helper(QObject*, QEvent*) + 269
10  org.qt-project.QtWidgets0x00010f7c16d2
QApplication::notify(QObject*, QEvent*) + 594
11  org.qt-project.QtCore   0x000116e0ca04
QCoreApplication::notifyInternal2(QObject*, QEvent*) + 212
12  org.qt-project.QtCore   0x000116e0dc3e
QCoreApplicationPrivate::sendPostedEvents(QObject*, int, QThreadData*) + 878
13  libqcocoa.dylib 0x0001192b0759 0x119281000 + 194393
14  libqcocoa.dylib 0x0001192b0fd0 0x119281000 + 196560
15  com.apple.CoreFoundation0x7fff2c2905e3
__CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 17
16  com.apple.CoreFoundation0x7fff2c290589 __CFRunLoopDoSource0
+ 108
17  com.apple.CoreFoundation0x7fff2c273f3b
__CFRunLoopDoSources0 + 195
18  com.apple.CoreFoundation0x7fff2c273505 __CFRunLoopRun +
1189
19  com.apple.CoreFoundation0x7fff2c272e0e CFRunLoopRunSpecific
+ 455
20  com.apple.HIToolbox 0x7fff2b55f9db
RunCurrentEventLoopInMode + 292
21  com.apple.HIToolbox 0x7fff2b55f715
ReceiveNextEventCommon + 603
22  com.apple.HIToolbox 0x7fff2b55f4a6
_Bl

[Wireshark-bugs] [Bug 15709] ISAKMP: Segmentation fault with non-hex string for IKEv1 Decryption Table Initiator Cookie

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15709

Uli Heilmeier  changed:

   What|Removed |Added

 Ever confirmed|0   |1
 Status|UNCONFIRMED |CONFIRMED

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15065] Wireshark can call extcap with empty multicheck argument

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15065

--- Comment #4 from Gerrit Code Review  ---
Change 32887 had a related patch set uploaded by Tomasz Moń:
Qt: Do not turn empty parameter values into spaces

https://code.wireshark.org/review/32887

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15065] Wireshark can call extcap with empty multicheck argument

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15065

Tomasz Mon  changed:

   What|Removed |Added

 Status|UNCONFIRMED |IN_PROGRESS
 Ever confirmed|0   |1

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15610] EtherNet/IP (CIP) dissector does not decode properly GetAttributeAll response for Ethernet Link Obj

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15610

--- Comment #5 from Gerrit Code Review  ---
Change 32882 merged by Anders Broman:
ENIP: Add more Ethernet Link attributes

https://code.wireshark.org/review/32882

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15703] Enhance ETSI ITS support (latest ETSI TS 103 301 and ETSI TS 103 097)

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15703

--- Comment #8 from Gerrit Code Review  ---
Change 32885 merged by Anders Broman:
ITS: Enhance ETSI ITS support (ETSI TS 103 301 and ETSI TS 103 097)

https://code.wireshark.org/review/32885

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15708] [HTTP/2] HEADERS frame fails after Fast Retransmission

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15708

--- Comment #1 from Youngje Kim  ---
Created attachment 17070
  --> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=17070&action=edit
pcap

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15708] [HTTP/2] HEADERS frame fails after Fast Retransmission

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15708

--- Comment #2 from Youngje Kim  ---
Created attachment 17071
  --> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=17071&action=edit
sslkeylog

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15708] New: [HTTP/2] HEADERS frame fails after Fast Retransmission

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15708

Bug ID: 15708
   Summary: [HTTP/2] HEADERS frame fails after Fast Retransmission
   Product: Wireshark
   Version: 3.0.1
  Hardware: x86-64
OS: macOS 10.13
Status: UNCONFIRMED
  Severity: Normal
  Priority: Low
 Component: Dissection engine (libwireshark)
  Assignee: bugzilla-ad...@wireshark.org
  Reporter: choze...@gmail.com
  Target Milestone: ---

Created attachment 17069
  --> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=17069&action=edit
HTTP/2 HEADERS FRAME AFTER FAST RETRANSMISSION

Build Information:
Version 3.0.1 (v3.0.1-0-gea351cd8) 

Copyright 1998-2019 Gerald Combs  and contributors.
License GPLv2+: GNU GPL version 2 or later
 This is free software;
see the source for copying conditions. There is NO warranty; not even for
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. 

Compiled (64-bit) with Qt 5.12.1, with libpcap, without POSIX capabilities,
with GLib 2.37.6, with zlib 1.2.8, with SMI 0.4.8, with c-ares 1.15.0, with Lua
5.2.4, with GnuTLS 3.4.17, with Gcrypt 1.7.7, with MIT Kerberos, with MaxMind
DB resolver, with nghttp2 1.21.0, with LZ4, with Snappy, with libxml2 2.9.9,
with QtMultimedia, with SBC, with SpanDSP, with bcg729. 

Running on Mac OS X 10.13.3, build 17D102 (Darwin 17.4.0), with Intel(R)
Core(TM) i5-7360U CPU @ 2.30GHz (with SSE4.2), with 16384 MB of physical
memory, with locale C, with libpcap version 1.8.1 -- Apple version 79.20.1,
with GnuTLS 3.4.17, with Gcrypt 1.7.7, with zlib 1.2.11, binary plugins
supported (14 loaded). Built using clang 4.2.1 Compatible Apple LLVM 10.0.0
(clang-1000.11.45.5). 

Wireshark is Open Source Software released under the GNU General Public
License. 

Check the man page and http://www.wireshark.org for more information. 
--
Hi. I am reporting a bug during the HTTP/2 packet dump analysis.

If Fast Retransmission occurs in the HTTP/2 HEADERS frame,
The header value of the HEADERS frame is then invalidated.

If you need a packet dump and an sslkeylog file, I'll attach it.

Thank you for your hard work.

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15703] Enhance ETSI ITS support (latest ETSI TS 103 301 and ETSI TS 103 097)

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15703

--- Comment #7 from Gerrit Code Review  ---
Change 32885 had a related patch set uploaded by Anders Broman:
ITS: Enhance ETSI ITS support (ETSI TS 103 301 and ETSI TS 103 097)

https://code.wireshark.org/review/32885

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15693] ISAKMP: not able to decode multiple RFC 6407 payloads(i.e. SA kEK, SAT, key download etc.)

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15693

Alexis La Goutte  changed:

   What|Removed |Added

Summary|Wireshak is not able to |ISAKMP: not able to decode
   |decode multiple RFC 6407|multiple RFC 6407
   |payloads(i.e. SA kEK, SAT,  |payloads(i.e. SA kEK, SAT,
   |key download etc.)  |key download etc.)

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15693] Wireshak is not able to decode multiple RFC 6407 payloads(i.e. SA kEK, SAT, key download etc.)

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15693

Uli Heilmeier  changed:

   What|Removed |Added

 Status|CONFIRMED   |IN_PROGRESS

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15693] Wireshak is not able to decode multiple RFC 6407 payloads(i.e. SA kEK, SAT, key download etc.)

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15693

--- Comment #5 from Uli Heilmeier  ---
(In reply to Alexis La Goutte from comment #4)
> Uli, you can work on this ?

Yes, I will have a look.

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15707] Wireshark fails on piped/streamed pcapng packet capture data with mixed BE/LE SHBs, but reads mixed BE/LE files correctly

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15707

--- Comment #2 from TheDiveO  ---
Created attachment 17068
  --> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=17068&action=edit
first SHB is BE, second SHB is LE.

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15707] Wireshark fails on piped/streamed pcapng packet capture data with mixed BE/LE SHBs, but reads mixed BE/LE files correctly

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15707

--- Comment #1 from TheDiveO  ---
Created attachment 17067
  --> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=17067&action=edit
contains a single SHB in BE, no interface block

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15707] New: Wireshark fails on piped/streamed pcapng packet capture data with mixed BE/LE SHBs, but reads mixed BE/LE files correctly

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15707

Bug ID: 15707
   Summary: Wireshark fails on piped/streamed pcapng packet
capture data with mixed BE/LE SHBs, but reads mixed
BE/LE files correctly
   Product: Wireshark
   Version: Git
  Hardware: x86
OS: All
Status: UNCONFIRMED
  Severity: Normal
  Priority: Low
 Component: Capture file support (libwiretap)
  Assignee: bugzilla-ad...@wireshark.org
  Reporter: wegwerf-1-...@gmx.de
  Target Milestone: ---

Created attachment 17066
  --> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=17066&action=edit
contains a single SHB in LE, with interface block also in BE

Build Information:
Both Linux and Windows with 3.1.0 git.


--
Per the pcapng file format definition, packet captures can be in BE (big
endian) or LE (little endian) format. When concatenating .pcapng files with a
mixture of BE and LE, Wireshark reads in the resulting packet capture files
without any problems. However, when an external capture plugin streams such
data into Wireshark, then Wireshark fails with an invalid pcapng format or
data. In contrast, when multiple SHB (section header blocks) with the same
endianess get streamed via pipe into Wireshark, it accepts them as valid.

So, Wireshark parses the very same packet capture data differently, depending
on whether it reads from disk or from an extcap pipe. This is a problem for
such extcaps that need to send their own SHB (section header block) before the
first capture from another capture tool, or need to send multiple SHBs from
multiple sources, one after the other.

For reference, please find enclosed these pcapng files:
- le-shb.pcapng: contains a single SHB in LE, with interface block also in BE.
- be-shb.pcapng: contains a single SHB in BE, no interface block.
- bele-shbs.pcapng: first SHB is BE, second SHB is LE.

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15706] New: Build issue in Wireshark - 3.0.1 on RHEL6

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15706

Bug ID: 15706
   Summary: Build issue in Wireshark - 3.0.1 on RHEL6
   Product: Wireshark
   Version: 3.0.1
  Hardware: x86-64
OS: Red Hat
Status: UNCONFIRMED
  Severity: Major
  Priority: Low
 Component: Build process
  Assignee: bugzilla-ad...@wireshark.org
  Reporter: abinaya.manikan...@wipro.com
  Target Milestone: ---

Build Information:
Wireshark Version which we tried is: Wireshark 3.0.1
OS: RedHat 6
Installed dependencies are below:
glib2:
glib2-devel-2.28.8-10.el6.x86_64
glib2-2.28.8-10.el6.i686

python version: 3.4.1
gcc version : 7.3.0

Steps which we are trying is:

cmake -DCMAKE_INSTALL_PREFIX=/opt/wire -DBUILD_opencv_python3=ON
-DPYTHON3_LIBRARY=/opt/python/x86_64/3.4.1/lib/libpython3.4m.so
-DPYTHON3_INCLUDE_DIR=/opt/python/x86_64/3.4.1/include/python3.4m/
-DPYTHON3_PACKAGES_PATH=/opt/python/x86_64/3.4.1/lib/python3.4/site-packages/
-DPYTHON3_EXECUTABLE=/opt/python/x86_64/3.4.1/bin/python3
-DPCAP_LIBRARY=/lib64/libcap.so -DPCAP_INCLUDE_DIR=/usr/include/sys/ ..

make

make install


--
Issue on RHEL6 while invoking "make" :


[root@praveena-test build]$ make
Scanning dependencies of target wsutil
[  0%] Building C object wsutil/CMakeFiles/wsutil.dir/adler32.c.o
In file included from /usr/include/sys/signal.h:1:0,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,
 from /usr/include/sys/signal.h:1,