Ethereal-users: Re: [ethereal-users] ethereal 0.8.3 ospf problems

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Nick Amato <naamato@xxxxxxxxx>
Date: Fri, 11 Feb 2000 14:27:13 -0500
Hi,

Attached is a capture file in libpcap format.  In this file
the ospf packets show up with "Unknown type" in the 802.3 "type"
field.  Some DD packets show up as "logical link control".

This file seems to work fine in 0.8.0.

The "ChangeLog" file is 0 bytes and it's not clear on the web
site where to find what changed between 0.8.3 and 0.8.0, but
here are a few bugs I've found in 0.8.0:

- When looking at LSAs in the Link State Update packet, if
  detail is selected (clicking +) on an LSA when the LSA below
  it is detailed (shows -) the newly selected LSA will "overwrite"
  the old one and the screen never recovers (e.g. permanently
  messed up).  This can be demonstrated with the attached dump.

- "Linke" should be "Link" when displaying LSAs in a DD
  exchange packet.  A patch against 0.8.3 is attached for this.

Thanks for your help.  This software is very useful!

Nick Amato
naamato@xxxxxxxxx


On Thu, Feb 10, 2000 at 10:35:19PM -0800, Guy Harris wrote:
> > I recently switched to 0.8.3.  The ospf packet does not
> > show up in the packet description (middle) window.  Instead
> > it shows an ethernet frame.  DD packets are shown as "interconXion
> > control".
> > 
> > I ran it in the gdb and found that the dissect_ospf()
> > function is still being called.
> > 
> > Is this a known bug?
> 
> Not known to me - I scanned through my menagerie of capture files
> (Tethereal piped to "egrep -i ospf" is handy for that...), and the files
> it found containing OSPF packets seem to dissect OK (although the only
> frames it found were Hello packets).
> 
> Could you either send us a capture file that has the problem, or
> selected frames from that capture file including one of the offending
> OSPF frames (slicing can either be done by using a display filter in
> Ethereal and saving selected frames, using a read filter - same syntax
> as display filters - in Tethereal with both "-r" and "-w" flags, or
> specifying the frame numbers of the relevant frames to "editcap")?