Ethereal-users: [Ethereal-users] Reverse DNS bug in tethereal

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Nick Mitchell <nick@xxxxxxxxxxxxxxx>
Date: Wed, 11 Aug 2004 11:26:36 -0400
I didn't see anything on the website about bug tracking so I am going to
assume that posting to this list will get it to the right place.

Description:

I found that if I run tethereal -Nn -R http to filter http traffic with
reverse DNS it will only capture a few packets; somewhere between 1 and
10 then it stops capturing. If I run it without -Nn for reverse DNS it
will capture perfectly. After repeated straces it dies exactly the same
each time. I have included the last few lines of the strace and the
version info for tethereal and for the debian package.

Let me know if anyone else is seeing this or if it is
machine/environment specific....

Thanks,

Nick

Strace Info:

----SNIP---
gettimeofday({1092236812, 923929}, NULL) = 0
poll([{fd=5, events=POLLIN}], 1, 6000)  = -1 EINTR (Interrupted system call)
--- SIGALRM (Alarm clock) @ 0 (0) ---
rt_sigaction(SIGALRM, {0x40b5c790, [ALRM], SA_RESTORER|SA_RESTART, 0x40bcb4a8}, {0x40b5c790, [ALRM], SA_RESTORER|SA_RESTART, 0x40bcb4a8}, 8) = 0
alarm(2)                                = 0
rt_sigprocmask(SIG_SETMASK, NULL, [ALRM RTMIN], 8) = 0
rt_sigsuspend([ALRM]
---END SNIP---


Version Info:

---SNIP-----
ns2:/home/kb# tethereal -v
tethereal 0.10.5
Compiled with GLib 2.4.2, with libpcap 0.7.2, with libz 1.2.1.1,
with libpcre 4.5, without UCD-SNMP or Net-SNMP, with ADNS.
Running with libpcap (version unknown) on Linux 2.4.18-bf2.4.
---END SNIP----

Debian Package info:

------SNIP-------
ns2:/home/kb# dpkg -p tethereal
Package: tethereal
Priority: optional
Section: net
Installed-Size: 200
Maintainer: Frederic Peters <fpeters@xxxxxxxxxx>
Architecture: i386
Source: ethereal
Version: 0.10.5-3
Depends: libadns1, libc6 (>= 2.3.2.ds1-4), libglib2.0-0 (>= 2.4.1), libpcap0.7, libpcre3 (>= 4.5), zlib1g (>= 1:1.2.1), ethereal-common (= 0.10.5-3)
Size: 74662
Description: Network traffic analyzer (console)

-------END SNIP--------

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Nick Mitchell <nick@xxxxxxxxxxxxxxx>
Network Security Specialist
Nitec Security
Voice - 302.542.7992
The invention of IQ does a great disservice to creativity in education.
- Joel Hildebrand
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~