https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7248
Summary: The Wireshark and tshark TCP conversations stats
tables aggregate reused connections into a single line
item
Product: Wireshark
Version: 1.7.x (Experimental)
Platform: x86
OS/Version: Windows XP
Status: NEW
Severity: Minor
Priority: Low
Component: Wireshark
AssignedTo: bugzilla-admin@xxxxxxxxxxxxx
ReportedBy: robert@xxxxxxxxxxxxxx
Robert Bullen <robert@xxxxxxxxxxxxxx> changed:
What |Removed |Added
----------------------------------------------------------------------------
Attachment #8415| |review_for_checkin?
Flags| |
Created attachment 8415
--> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=8415
This patch offers a fix for the 1.7 trunk. This bug exists in 1.6 as well; I
recommend backporting, if possible.
Build Information:
TShark 1.7.2-USBank-NoZLib-00x (SVN Rev 42576 from /trunk)
Copyright 1998-2012 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled (32-bit) with GLib 2.28.8, with WinPcap (4_1_2), without libz, without
POSIX capabilities, with SMI 0.4.8, with c-ares 1.7.1, with Lua 5.1, without
Python, with GnuTLS 2.12.18, with Gcrypt 1.4.6, with MIT Kerberos, with GeoIP.
Running on Windows XP Service Pack 3, build 2600, with WinPcap version 4.1.2
(packet.dll version 4.1.0.2001), based on libpcap version 1.0 branch 1_0_rel0b
(20091008).
Built using Microsoft Visual C++ 10.0 build 40219
--
The TCP dissector properly distinguishes TCP conversations in the face of {
address, port, address, port } quadruple reuse. However, the TCP Conversations
stats tables do not reflect this in both Wireshark and tshark. Instead,
multiple TCP streams having the same quadruple are aggregated into a single
line item.
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.