http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1346
Summary: udp dissector labels length as bonus for reassembled ip
datagram
Product: Wireshark
Version: 0.99.5
Platform: PC
OS/Version: Windows 2000
Status: NEW
Severity: Normal
Priority: Low
Component: Wireshark
AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
ReportedBy: bob@xxxxxxxxxxxxxxx
Build Information:
Version 0.99.5 (SVN Rev 20677)
Copyright 1998-2007 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled with GTK+ 2.10.7, with GLib 2.12.7, with WinPcap (version unknown),
with libz 1.2.3, with libpcre 6.4, with Net-SNMP 5.4, with ADNS, with Lua 5.1,
with GnuTLS 1.6.1, with Gcrypt 1.2.3, with MIT Kerberos, with PortAudio
PortAudio V19-devel, with AirPcap.
Running on Windows 2000 Service Pack 4, build 2195, with WinPcap version 3.1
beta3 (packet.dll version 3, 1, 0, 23), based on libpcap version 0.8.1, without
AirPcap.
Built using Microsoft Visual C++ 6.0 build 8804
--
When analyzing large UDP packets fragmented into multiple IP packets, wireshark
labels the UDP length as bogus when it is not. Specifically, the summary line
shows "[BAD UDP LENGTH 2064 > IP PAYLOAD LENGTH]" and the Packet Details pane
shows an error under User Datagram Protocol, "Length: 2064 (bogus, should be
584)". The packets in question are UDP packets containing 2056 bytes of
payload data for a total IP packet size of 2084 bytes transported as two
Ethernet frames containing 1500 and 584 bytes. The length 2064 is correct for
the data in question.
This does not happen in Ethereal 0.10.14 on WinXP (full version info on
request).
--
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.