Howdy.
I think I found a bug in the data display of ethereal.
When displaying a TCP/IP packet with 1 data byte, the hex dump at the
bottom of the
screen displays the 1 data byte followed by 5 bytes of bonus junk.
In fact, ethereal always displays 6 bytes of data if the number of
bytes sent are less than 6.
So, if you send 2 bytes, ethereal correctly displays the two bytes
followed by 4 bytes of junk.
I've attached a dump file (libpcap). Use the display filter:
(ip.addr eq 192.168.0.1 and ip.addr eq 192.168.0.16)
Then take a look at number 80 and number 84.
Basically I have a client/server test setup.
Here's my test. Client = ringo.reno.nv.us. Server = 192.168.0.16.
Client sends 1 byte with a count (In this case it's 11)
Server sends back count bytes - it sends 11 bytes.
Client reads count bytes.
client sends 1 byte.
server reads 1 byte and closes connection.
Here's my system info....
Linux Version: Linux 2.2.14-5.0 (Stock RH 6.2 install)
GTK Version: 1.2.6
Ethereal Version:
ethereal 0.8.9, with GTK+ 1.2.6, with libpcap 0.4, with libz 1.1.3, with
UCD SNMP 4.1.1
Attachment:
etherealbug.tcp
Description: Binary data