Wireshark-bugs: [Wireshark-bugs] [Bug 10746] New: BGP update community - incorrect deconding

Date: Sun, 30 Nov 2014 21:48:57 +0000
Bug ID 10746
Summary BGP update community - incorrect deconding
Product Wireshark
Version Git
Hardware x86-64
OS All
Status UNCONFIRMED
Severity Trivial
Priority Low
Component Dissection engine (libwireshark)
Assignee [email protected]
Reporter [email protected]

Created attachment 13297 [details]
Patch incorrect bgp communities decoding

Build Information:
yann@dagda:~/wdir/wireshark$ ./wireshark -v
Wireshark 1.99.1 (v1.99.1rc0-732-g34e0cc7 from unknown)

Copyright 1998-2014 Gerald Combs <[email protected]> and contributors.
License GPLv2+: GNU GPL version 2 or later
<http://www.gnu.org/licenses/old-licenses/gpl-2.0.html>
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with Qt 5.3.2, with libpcap, without POSIX capabilities,
without libnl, with libz 1.2.8, with GLib 2.42.0, without SMI, without c-ares,
without ADNS, without Lua, without GnuTLS, without Gcrypt, without Kerberos,
without GeoIP, without PortAudio, with AirPcap.

Running on Linux 3.16.0-4-amd64, with locale fr_FR.UTF-8, with libpcap version
1.6.2, with libz 1.2.8, without AirPcap.
AMD Phenom(tm) II X4 965 Processor

Built using gcc 4.9.1.

--
Hi,
In the current git version an offset error exists in the dissection of a BGP
update regarding the community path attributes. This leads to an incorrect
decoding of the value of the BGP communities.

A quick check with the sample bgp capture:
http://wiki.wireshark.org/SampleCaptures?action="">

When we decode manually the packet capture, the BGP Update (packet #17) has two
BGP communities:
 - fe 09 01 f4 => 65033:500
 - fe 09 02 58 => 65033:600
But the BGP packet dissector shows:

I joined a quick path to fix this issue. 


Regards,
Yann.


You are receiving this mail because:
  • You are watching all bug changes.