https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4485
--- Comment #4 from cinthia721@xxxxxxxxx 2010-02-13 11:21:19 PST ---
(In reply to comment #3)
> > To add to the mix, I just recently upgraded from 0.99 to 1.2.5. I believe it used to validate udp checksum when displaying.
>
> It does, didn't I show you that?
In 0.99, I did not have to use -o. UDP checksum validation was enabled by
default.
Version 0.99
> tshark -r file.cap -R "frame.number == 3" -V
User Datagram Protocol, Src Port: 50036 (50036), Dst Port: 5060 (5060)
Source port: 50036 (50036)
Destination port: 5060 (5060)
Length: 1155
Checksum: 0xdedf [correct]
Version 1.2.5
> tshark -r file.cap -R "frame.number == 3" -V
User Datagram Protocol, Src Port: sip (5060), Dst Port: sip (5060)
Source port: sip (5060)
Destination port: sip (5060)
Length: 788
Checksum: 0x88d6 [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
> Tshark uses the Wireshark preferences file, which contains such entry.
I assume you mean "udp.check_checksum:true", and not
"udp.check_checksum:false", is there.
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.