Wireshark-bugs: [Wireshark-bugs] [Bug 12031] New: Packet Details window Right-Click menu option

Date: Tue, 19 Jan 2016 14:34:45 +0000
Bug ID 12031
Summary Packet Details window Right-Click menu option "Export Packet Bytes..." exports incorrect data.
Product Wireshark
Version 2.0.1
Hardware x86-64
OS Windows 7
Status CONFIRMED
Severity Major
Priority Low
Component Common utilities (libwsutil)
Assignee [email protected]
Reporter [email protected]

Created attachment 14263 [details]
File created using "Export Packet Bytes..."

Build Information:
Version 2.0.1 (v2.0.1-0-g59ea380 from master-2.0)

Copyright 1998-2015 Gerald Combs <[email protected]> and contributors.
License GPLv2+: GNU GPL version 2 or later
<http://www.gnu.org/licenses/old-licenses/gpl-2.0.html>
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with Qt 5.3.2, with WinPcap (4_1_3), with libz 1.2.8, with
GLib 2.42.0, with SMI 0.4.8, with c-ares 1.9.1, with Lua 5.2, with GnuTLS
3.2.15, with Gcrypt 1.6.2, with MIT Kerberos, with GeoIP, with QtMultimedia,
with AirPcap.

Running on 64-bit Windows 7 Service Pack 1, build 7601, with locale C, with
WinPcap version 4.1.3 (packet.dll version 4.1.0.2980), based on libpcap version
1.0 branch 1_0_rel0b (20091008), with GnuTLS 3.2.15, with Gcrypt 1.6.2, without
AirPcap.
      Intel(R) Core(TM) i7-3720QM CPU @ 2.60GHz (with SSE4.2), with 8065MB of
physical memory.


Built using Microsoft Visual C++ 12.0 build 31101
--
Within the Packet Details window the Right-Click menu option "Export Packet
Bytes..." exports data to a file but the data is not the correct data.

The "Copy ...as Hex Dump" data below was created from the same packet data that
the attached file "data.raw" was created using the "Export Packet Bytes...". 
You will find that the data is incorrectly converted to incorrect values.

0000   c2 d4 f5 f8 f8 f2 f0 f0 f0 f0 f0 c1 f0 f0 40 40
0010   40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40
0020   40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40
0030   40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40
0040   40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40
0050   40 40 40 40 40 40 40 40 40 40 40 40 40 40 c8 e7
0060   60 e3 d9 f5 f5 c3 f2 e5 40 40 f0 f0 f0 f1 e8 f0
0070   f0 f0 f0 f0 f0 f0 f7 f0 4b f9 f9 40 40 40 40 40
0080   40 40 40 40 40 40 40 f0 f0 f0 f0 f0 f0 f0 f0 f0
0090   f0 f0 f0 f0 f0 f0 f0 f0 4b f0 f0 f0 f0 f0 f0 f0
00a0   f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 4b f0 f0 f0 f0
...


You are receiving this mail because:
  • You are watching all bug changes.