Bug ID |
12464
|
Summary |
TShark gives off Dissector bug, protocol Bundle
|
Product |
Wireshark
|
Version |
2.0.3
|
Hardware |
x86
|
OS |
Windows 7
|
Status |
UNCONFIRMED
|
Severity |
Minor
|
Priority |
Low
|
Component |
TShark
|
Assignee |
[email protected]
|
Reporter |
[email protected]
|
Build Information:
TShark (Wireshark) 2.0.3 (v2.0.3-0-geed34f0 from master-2.0)
Copyright 1998-2016 Gerald Combs <[email protected]> and contributors.
License GPLv2+: GNU GPL version 2 or later
<http://www.gnu.org/licenses/old-lice
nses/gpl-2.0.html>
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled (32-bit) with WinPcap (4_1_3), with libz 1.2.8, with GLib 2.38.0, with
SMI 0.4.8, with c-ares 1.9.1, with Lua 5.2, with GnuTLS 3.2.15, with Gcrypt
1.6.2, with MIT Kerberos, with GeoIP.
Running on 32-bit Windows 7 Service Pack 1, build 7601, with locale
Japanese_Japan.932, with WinPcap version 4.1.3 (packet.dll version 4.1.0.2980),
based on libpcap version 1.0 branch 1_0_rel0b (20091008), with GnuTLS 3.2.15,
with Gcrypt 1.6.2.
Intel(R) Core(TM)2 Duo CPU U9600 @ 1.60GHz, with 1914MB of physical
memory.
Built using Microsoft Visual C++ 12.0 build 40629
--
I get similar errors when I attempt to run the following TShark commands:
tshark -nn -r Capture.pcapng -T fields -E separator=; -e ip.src -e tcp.srcport
-e ip.dst -e tcp.dstport "(tcp.flags.syn == 1 and tcp.flags.ack == 0)" >
Capture.csv
** (tshark.exe:9540): WARNING **: Dissector bug, protocol Bundle, in packet
5835521:
C:\buildbot\wireshark\wireshark-2.0-32\windows-8.1-x86\build\epan\dissectors\packet-tcp.c:2644:
failed assertion "proto_desegment && pinfo->can_desegment"
.AND.
tshark -r Capture.pcapng -nn -e ip.src -e dns.qry.name -E separator=, -T fields
dns > DNS.csv
** (tshark.exe:11872): WARNING **: Dissector bug, protocol Bundle, in packet
5835521:
C:\buildbot\wireshark\wireshark-2.0-32\windows-8.1-x86\build\epan\dissectors\packet-tcp.c:2644:
failed assertion "proto_desegment && pinfo->can_desegment"
I performed the following to get the packet 5835521 dumped to a single file for
attachment.
editcap -r Capture.pcapng pkt5835521.pcapng 5835521
You are receiving this mail because:
- You are watching all bug changes.