https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16038

Peter Wu <pe...@lekensteyn.nl> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|CONFIRMED                   |IN_PROGRESS

--- Comment #2 from Peter Wu <pe...@lekensteyn.nl> ---
I'm working on fixing this now.

I also noticed that the 'manuf' file previously included "well-known addresses"
(WKAs), but it was removed in v2.5.0rc0-506-g14d94e174a. Parsing can be
simplified to:

    The manuf contains comments, empty lines or tab-separated fields:
    1. Address prefix, exactly one of:
        xx:xx:xx
        xx:xx:xx:x0:00:00/28
        xx:xx:xx:xx:x0:00/36
    2. Short name (max 8 characters), for example "Xerox"
    3. Optional long name, for example "Xerox Corporation".
    4. Optional comment (part of the long name):
        # blablabla
    See also parse_ether_address_fast in epan/addr_resolv.c

Some other issues in the lookup tool/database that I intend to fix:
1. The short name is not ignored, so "IEEERegi IEEE Registration Authority" is
reported as opposed to "IEEE Registration Authority". This may affect search
results, those searching for "IEEERegi" will likely not find a match.
2. The names are currently ignored if a comment is present. If manuf contains:

    00:60:70 <TAB> CiscoRou <TAB> Cisco <TAB> # routers (2524 and 4500)

the tool reports "routers (2524 and 4500)" without ever mentioning Cisco. I
will change it to report "Cisco # routers (2524 and 4500)"

-- 
You are receiving this mail because:
You are watching all bug changes.
___________________________________________________________________________
Sent via:    Wireshark-bugs mailing list <wireshark-bugs@wireshark.org>
Archives:    https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
             mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

Reply via email to