Ethereal-dev: Re: [ethereal-dev] capture files that kill ethereal 0.8.7

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Gilbert Ramirez <gram@xxxxxxxxxx>
Date: Thu, 27 Apr 2000 15:41:45 -0500
On Thu, Apr 27, 2000 at 02:52:04PM -0500, don@xxxxxxxxxxxxxxxxxxxxxxx wrote:
> 
> 
> ether4 - does not capture or load ok (cores)
>   Was extracted from a larger file that if tcpreplayed and captured with
>   capture filter (!port 139), all subsequent captures (with or without 
> filters)
>   work fine. This sample does not have this characteristic, probably 

This is another "reading beyond the end of a packet" bug, this time
in line 8833 of packet-smb.c.

Sigh. I've become sufficiently annoyed that I'm going to drop my
current work on the display filter engine and implement our smart/testy
buffer with "exceptions" in C. I hate the fact that the good name of
Ethereal gets tarnished when reading short packets.

I guess most Open Source software happens when one gets "sufficiently annoyed".

> 
> ps: was working with a client and he started peering over my shoulder to 
> see
> ethereal. He asked if it was something my company had bought. Nope, it's an
> open source program. He was amazed that I'd just "gotten it off the net".
> Definately much better than certain overpriced products from a certain 
> company
> whose initials are NAI.


Thanks!

--gilbert