Ethereal-users: [Ethereal-users] Possible bug in LLC protocol dissector

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Tim Everitt" <tim.everitt@xxxxxxxx>
Date: Thu, 19 Feb 2004 10:22:31 -0000
I have a one-frame capture file which appears to cause the LLC dissector to
run out of control - t/ethereal consumes all available physical and swap
memory until terminated by the system.

System is Ethereal 0.10.0 on a RedHat9 operating system.

The frame is a visibly corrupt frame captured via an Endace card.

When the only enabled protocol is Ethernet the file loads ok.
When the only enabled protocols are Ethernet and LLC the problem is
apparent.

If anyone has the ability to diagnose/fix the problem in the LLC dissector,
please email me and I will send the one-frame capture file.

Thanks to all for an outstanding system.

Tim Everitt