Wireshark-bugs: [Wireshark-bugs] [Bug 12464] New: TShark gives off Dissector bug, protocol Bundl

Date: Fri, 20 May 2016 06:57:44 +0000
Bug ID 12464
Summary TShark gives off Dissector bug, protocol Bundle
Product Wireshark
Version 2.0.3
Hardware x86
OS Windows 7
Status UNCONFIRMED
Severity Minor
Priority Low
Component TShark
Assignee [email protected]
Reporter [email protected]

Build Information:
TShark (Wireshark) 2.0.3 (v2.0.3-0-geed34f0 from master-2.0)

Copyright 1998-2016 Gerald Combs <[email protected]> and contributors.
License GPLv2+: GNU GPL version 2 or later
<http://www.gnu.org/licenses/old-lice
nses/gpl-2.0.html>
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (32-bit) with WinPcap (4_1_3), with libz 1.2.8, with GLib 2.38.0, with
SMI 0.4.8, with c-ares 1.9.1, with Lua 5.2, with GnuTLS 3.2.15, with Gcrypt
1.6.2, with MIT Kerberos, with GeoIP.

Running on 32-bit Windows 7 Service Pack 1, build 7601, with locale
Japanese_Japan.932, with WinPcap version 4.1.3 (packet.dll version 4.1.0.2980),
based on libpcap version 1.0 branch 1_0_rel0b (20091008), with GnuTLS 3.2.15,
with Gcrypt 1.6.2.
Intel(R) Core(TM)2 Duo CPU     U9600  @ 1.60GHz, with 1914MB of physical
memory.



Built using Microsoft Visual C++ 12.0 build 40629
--
I get similar errors when I attempt to run the following TShark commands:

tshark -nn -r Capture.pcapng -T fields -E separator=; -e ip.src -e tcp.srcport
-e ip.dst -e tcp.dstport "(tcp.flags.syn == 1 and tcp.flags.ack == 0)" >
Capture.csv

** (tshark.exe:9540): WARNING **: Dissector bug, protocol Bundle, in packet
5835521:
C:\buildbot\wireshark\wireshark-2.0-32\windows-8.1-x86\build\epan\dissectors\packet-tcp.c:2644:
failed assertion "proto_desegment && pinfo->can_desegment"

.AND.

tshark -r Capture.pcapng -nn -e ip.src -e dns.qry.name -E separator=, -T fields
dns > DNS.csv

** (tshark.exe:11872): WARNING **: Dissector bug, protocol Bundle, in packet
5835521:
C:\buildbot\wireshark\wireshark-2.0-32\windows-8.1-x86\build\epan\dissectors\packet-tcp.c:2644:
failed assertion "proto_desegment && pinfo->can_desegment"

I performed the following to get the packet 5835521 dumped to a single file for
attachment.

editcap -r Capture.pcapng pkt5835521.pcapng 5835521


You are receiving this mail because:
  • You are watching all bug changes.