Wireshark-bugs: [Wireshark-bugs] [Bug 6745] New: SIP: retransmissions can be on 2xx, BYE or ACK

Date: Tue, 17 Jan 2012 06:04:48 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6745

           Summary: SIP: retransmissions can be on 2xx, BYE or ACK
           Product: Wireshark
           Version: SVN
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Enhancement
          Priority: Low
         Component: Wireshark
        AssignedTo: bugzilla-admin@xxxxxxxxxxxxx
        ReportedBy: benoit.sibaud@xxxxxxxxxx


Created attachment 7696
  --> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=7696
SIP retransmissions can be on 2xx, BYE or ACK.

Build Information:
Version 1.7.1 (SVN Rev 40556 from /trunk)

Copyright 1998-2012 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (32-bit) with GTK+ 2.24.4, with Cairo 1.10.2, with Pango 1.28.4, with
GLib 2.28.6, with libpcap (version unknown), with libz 1.2.3.4, without POSIX
capabilities, without SMI, without c-ares, without ADNS, with Lua 5.1, without
Python, with GnuTLS 2.8.6, with Gcrypt 1.4.6, with MIT Kerberos, without GeoIP,
without PortAudio, without AirPcap.

Running on Linux 2.6.38-13-generic, with locale fr_FR.UTF-8, with libpcap
version 1.1.1, with libz 1.2.3.4, GnuTLS 2.8.6, Gcrypt 1.4.6.

Built using gcc 4.5.2.
--
SIP retransmissions can be on 2xx, BYE or ACK.

Test on 11956 SIP UDP frames, with Preferences/Protocols/SIP "retransmissions
always use the same source port" disabled (my previous patch), filtering on
"not sip.resend-original".

With Wireshark 1.4.6: 11384 frames.

With patched Wireshark SVN 1.7.1: 11318 frames (it adds 46 ACK, 10 BYE and 10
"200" detected as retransmissions).

Patch: do not ignore ACK or BYE for retransmission check, and set method for
frames with the same CSEQ, requests or (status and code >= 200).

Example: callflow INVITE, 100, 200 SDP, multiple ACK, multiple BYE, multiple
200. Wireshark 1.4.6 doesn't see any retransmissions.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.