http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2000
------- Comment #5 from jaap.keuter@xxxxxxxxx 2007-11-24 16:01 GMT -------
The RTP payloads really are missing the 4 octets. In the ngsniffer.c file both
sizes are determined based on what's stored in the capture file records. This
bit sets the pseudo header:
wth->phdr.len = true_size ? true_size : size;
wth->phdr.caplen = size;
It seems that true_size is shorter than size. But both are read straight from
the capture. So we need a better understanding of the record types, or the
software creating them is actually wrong (gasp).
--
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.