Hello...
I'm new to Ethereal, and I have a particular packet on my network
that is unviewable because any attempt to display the entire packet causes
Ethereal to crash.
The packet in question is sent to a multicast address with Protocol:
PGM; Info: ODATA sqn 0x718 (or whatever) gsi 000000000000 tsdulen 1400 (or
728 or 724)
The core dump message in XP is: "file proto.c: line 1668: assertion
failed: ((guint)hfindex < gpa_hfinfo.len)
The core dump message in FreeBSD is: "** ERROR **: file proto.c:
line 446 (proto_registrar_get_nth: assertion failed: (hfindex >=0 && (guint)
hfindex < gpa_hfinfo -> len)"
If I truncate the capture length to 68 bytes, Ethereal will display
those bytes without crashing. It is the whole packet that causes the
problem. If there's something illegal about this packet, I would very much
like to know it. If the problem is with Ethereal, it would be good to find
a workaround.
And again, this occurs with Ethereal on both Windows XP and FreeBSD
4.9.
-Chris