| Bug ID |
11458
|
| Summary |
Wireshark doesn't detect mismatched link-layer protocol ID and IP version
|
| Product |
Wireshark
|
| Version |
Git
|
| Hardware |
x86
|
| OS |
All
|
| Status |
UNCONFIRMED
|
| Severity |
Normal
|
| Priority |
Low
|
| Component |
Dissection engine (libwireshark)
|
| Assignee |
[email protected]
|
| Reporter |
[email protected]
|
Created attachment 13809 [details]
IPv6 over EtherType 0x0800
Build Information:
Wireshark 1.99.9 (v1.99.9rc0-322-ga5fe54d from unknown)
Copyright 1998-2015 Gerald Combs <[email protected]> and contributors.
License GPLv2+: GNU GPL version 2 or later
<http://www.gnu.org/licenses/old-licenses/gpl-2.0.html>
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled (64-bit) with GTK+ 3.16.6, with Cairo 1.14.2, with Pango 1.36.8, with
libpcap, with POSIX capabilities (Linux), with libnl 3, with libz 1.2.8, with
GLib 2.44.1, without SMI, without c-ares, without ADNS, with Lua 5.2, with
GnuTLS 3.4.3, with Gcrypt 1.6.3, with MIT Kerberos, with GeoIP, with PortAudio
V19-devel (built Jan 31 2014 21:19:35), without AirPcap.
Built using gcc 5.2.0.
--
For link-layers encapsulating IP that demultiplex between IPv4 and IPv6, e.g,
Ethernet II, Wireshark doesn't report to the user when the link-layer says it
has IPv4 but it is really encapsulating IPv6 (e.g, IPv6 over Ethertype 0x0800).
This should be an expert info warning IMO. See attached pcap.
You are receiving this mail because:
- You are watching all bug changes.