Wireshark-bugs: [Wireshark-bugs] [Bug 10385] New: Ethernet OAM (CFM) loopback frames including a

Date: Fri, 15 Aug 2014 10:10:40 +0000
Bug ID 10385
Summary Ethernet OAM (CFM) loopback frames including a Test- or Data-TLV are wrongly decoded as malformed
Product Wireshark
Version 1.12.0
Hardware x86-64
OS Windows 7
Status UNCONFIRMED
Severity Normal
Priority Low
Component Dissection engine (libwireshark)
Assignee [email protected]
Reporter [email protected]

Created attachment 12985 [details]
Ethernet Loopback frames with Test-TLVs

Build Information:
Version 1.12.0 (v1.12.0-0-g4fab41a from master-1.12)

Copyright 1998-2014 Gerald Combs <[email protected]> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with GTK+ 2.24.23, with Cairo 1.10.2, with Pango 1.34.0, with
GLib 2.38.0, with WinPcap (4_1_3), with libz 1.2.5, with SMI 0.4.8, with c-ares
1.9.1, with Lua 5.2, without Python, with GnuTLS 3.1.22, with Gcrypt 1.6.0,
without Kerberos, with GeoIP, with PortAudio V19-devel (built Jul 31 2014),
with AirPcap.

Running on 64-bit Windows 7 Service Pack 1, build 7601, with WinPcap version
4.1.3 (packet.dll version 4.1.0.2980), based on libpcap version 1.0 branch
1_0_rel0b (20091008), GnuTLS 3.1.22, Gcrypt 1.6.0, without AirPcap.
Intel(R) Core(TM)2 Duo CPU     P8600  @ 2.40GHz, with 4047MB of physical 
memory.


Built using Microsoft Visual C++ 10.0 build 40219

--
Ethernet Loopback Messages (ETH-LBM) and Ethernet Loopback Replies (ETH-LBR)
frames are displayed as malformed if there are additional TLVs included, e.g. a
Test-TLV or a Data-TLV.

The attached capture file shows ETH-LBM and ETH-LBRs including a Test-TLV. It
seems that wireshark does not detect the start of the next TLV correctly.

Please note that in the ETH-LBM frames the FCS field is filled up with "0" and
does not include an correct FCS value. This is due to the test system that
captured the frames and not an error. The ETH-LBR frames incude a correct FCS.


You are receiving this mail because:
  • You are watching all bug changes.