Wireshark-bugs: [Wireshark-bugs] [Bug 12339] New: Malformed Packet: RTP

Date: Fri, 15 Apr 2016 08:36:47 +0000
Bug ID 12339
Summary Malformed Packet: RTP
Product Wireshark
Version 2.0.2
Hardware x86
OS Windows 7
Status UNCONFIRMED
Severity Major
Priority Low
Component Dissection engine (libwireshark)
Assignee [email protected]
Reporter [email protected]

Created attachment 14478 [details]
Sample capture

Build Information:
Compiled (64-bit) with Qt 5.3.2, with WinPcap (4_1_3), with libz 1.2.8, with
GLib 2.42.0, with SMI 0.4.8, with c-ares 1.9.1, with Lua 5.2, with GnuTLS
3.2.15, with Gcrypt 1.6.2, with MIT Kerberos, with GeoIP, with QtMultimedia,
with AirPcap.
--
Dissection of RTP patcket fails with Malformed Packet (Exception occurred).
But I don't think the packet is malformed. All checksum are ok.

Attaching a sample capture of 3 packets from one stream (MPEG-TS).

In packet 2 dissection fails. Looking into this packet, at 46h I see first
MPEG-TS header: 0x47406511
Second one at 102h: 0x47006512

I think the problem could be the 40h in the header. According to Partial
Transport Stream Packet Format this means that Payload Unit Start Indicator is
set.

Payload Unit Start Indicator     1     0x400000     Set when a PES, PSI, or
DVB-MIP packet begins immediately following the header.

So, could be a problem with dissector and PUSI?


You are receiving this mail because:
  • You are watching all bug changes.