Wireshark-bugs: [Wireshark-bugs] [Bug 11653] New: Malformed MIH 802.21 Packet

Date: Thu, 29 Oct 2015 12:54:15 +0000
Bug ID 11653
Summary Malformed MIH 802.21 Packet
Product Wireshark
Version 1.12.7
Hardware x86-64
OS Ubuntu
Status UNCONFIRMED
Severity Normal
Priority Low
Component Dissection engine (libwireshark)
Assignee [email protected]
Reporter [email protected]

Created attachment 13955 [details]
Capture File

Build Information:
Paste the COMPLETE build information from "Help->About Wireshark", "wireshark
-v", or "tshark -v".
--
I have the following capture from a network of two nodes using MIH 802.21
Protocol. I am using Wireshark Version 1.12.7 on Ubuntu 14.04 x64. The MIH
message seems to be OK in the binary format, however Wireshark considers it as
a malformed packet. Wireshark is not able to interpret after the TLV length
field of the Source MIHF ID TLV. So is it a problem in the protocol
serialization or Wireshark dissector itself?

>From the binary format: We have MIH header length of 8 Bytes which is
interpreted correctly by Wireshark. Then Source MIHF ID TLV is 1 + 1 + 12 = 14
Bytes. The same thing for the destination MIHF ID TLV = 14 Bytes. Then Link
Identifier List TLV comes which has TLV Type of (25 in Decimal or 0x19) and
length of zero. Finally Registration Code TLV which has TLV Type of (11 in
Decimal or 0xb) and length of one byte. The total size of this MIH frame is 41
Bytes.


You are receiving this mail because:
  • You are watching all bug changes.