Wireshark-bugs: [Wireshark-bugs] [Bug 12907] New: Option 83 suboption 12 is displayed as Unknown

Date: Fri, 16 Sep 2016 12:10:47 +0000
Bug ID 12907
Summary Option 83 suboption 12 is displayed as Unknown in linux version of tshark
Product Wireshark
Version 1.10.14
Hardware x86-64
OS other
Status UNCONFIRMED
Severity Critical
Priority Low
Component TShark
Assignee [email protected]
Reporter [email protected]

Created attachment 14924 [details]
Option 82 suboption 12

Build Information:
tshark -v
TShark 1.10.14 (Git Rev Unknown from unknown)

Copyright 1998-2015 Gerald Combs <[email protected]> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with GLib 2.42.2, with libpcap, with libz 1.2.7, with POSIX
capabilities (Linux), without libnl, with SMI 0.4.8, with c-ares 1.10.0, with
Lua 5.1, without Python, with GnuTLS 3.3.8, with Gcrypt 1.5.3, with MIT
Kerberos, without GeoIP.

Running on Linux 3.10.0-123.el7.x86_64, with locale en_US.UTF-8, with libpcap
version 1.5.3, with libz 1.2.7.
        Intel(R) Core(TM) i7-2600 CPU @ 3.40GHz

Built using gcc 4.8.5 20150623 (Red Hat 4.8.5-4).
wireshark -v
wireshark 1.10.14 (Git Rev Unknown from unknown)

Copyright 1998-2015 Gerald Combs <[email protected]> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with GTK+ 2.24.28, with Cairo 1.14.2, with Pango 1.36.8, with
GLib 2.42.2, with libpcap, with libz 1.2.7, with POSIX capabilities (Linux),
without libnl, with SMI 0.4.8, with c-ares 1.10.0, with Lua 5.1, without
Python,
with GnuTLS 3.3.8, with Gcrypt 1.5.3, with MIT Kerberos, without GeoIP, without
PortAudio, with AirPcap.

Running on Linux 3.10.0-123.el7.x86_64, with locale en_US.UTF-8, with libpcap
version 1.5.3, with libz 1.2.7, GnuTLS 3.3.8, Gcrypt 1.5.3, without AirPcap.
        Intel(R) Core(TM) i7-2600 CPU @ 3.40GHz

Built using gcc 4.8.5 20150623 (Red Hat 4.8.5-4).
--

bootp.option.agent_information_option.suboption in 
tshark -r option82_12.pcap -T pdml

The same pcap when opened in windows7 with wireshark version 2.2.0 is getting
displayed as Unknown. Have attached the pcap sample output.

  <field name="bootp.ip.relay" showname="Relay agent IP address: 0.0.0.0
(0.0.0.0)" size="4" pos="66" show="0.0.0.0" value="00000000"/>
    <field name="bootp.hw.mac_addr" showname="Client MAC address:
00:00:00_00:00:01 (00:00:00:00:00:01)" size="6" pos="70"
show="00:00:00:00:00:01" value="000000000001"/>
    <field name="bootp.hw.addr_padding" showname="Client hardware address
padding: 00000000000000000000" size="10" pos="76"
show="00:00:00:00:00:00:00:00:00:00" value="00000000000000000000"/>
    <field name="bootp.server" showname="Server host name not given" size="64"
pos="86" show=""
value="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"/>
    <field name="bootp.file" showname="Boot file name not given" size="128"
pos="150" show=""
value="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"/>
    <field name="bootp.dhcp" showname="Frame is DHCP: True" hide="yes" size="0"
pos="42" show="1"/>
    <field name="bootp.cookie" showname="Magic cookie: DHCP" size="4" pos="278"
show="99.130.83.99" value="63825363"/>
    <field name="bootp.option.type" showname="Option: (53) DHCP Message Type"
size="3" pos="282" show="53" value="350103">
      <field name="bootp.option.length" showname="Length: 1" size="1" pos="283"
show="1" value="01"/>
      <field name="bootp.option.value" showname="Value: 03" hide="yes" size="1"
pos="284" show="03" value="03"/>
      <field name="bootp.option.dhcp" showname="DHCP: Request (3)" size="1"
pos="284" show="3" value="03"/>
    </field>
    <field name="bootp.option.type" showname="Option: (204) Unassigned"
size="8" pos="285" show="204" value="cc06000000000001">
      <field name="bootp.option.length" showname="Length: 6" size="1" pos="286"
show="6" value="06"/>
      <field name="bootp.option.value" showname="Value: 000000000001"
hide="yes" size="6" pos="287" show="00:00:00:00:00:01" value="000000000001"/>
      <field name="bootp.option.value" showname="Value: 000000000001" size="6"
pos="287" show="00:00:00:00:00:01" value="000000000001"/>
    </field>
    <field name="bootp.option.type" showname="Option: (82) Agent Information
Option" size="8" pos="293" show="82" value="52060c0412345678">
      <field name="bootp.option.length" showname="Length: 6" size="1" pos="294"
show="6" value="06"/>
      <field name="bootp.option.value" showname="Value: 0c0412345678"
hide="yes" size="6" pos="295" show="0c:04:12:34:56:78" value="0c0412345678"/>
      <field name="bootp.option.agent_information_option.suboption"
showname="Option 82 Suboption: (12) Unknown" size="6" pos="295" show="12"
value="0c0412345678">
        <field name="bootp.option.suboption_length" showname="Length: 4"
size="1" pos="296" show="4" value="04"/>
        <field name="bootp.option.agent_information_option.value"
showname="Value: 12345678" size="4" pos="297" show="12:34:56:78"
value="12345678"/>
      </field>
    </field>
    <field name="bootp.option.type" showname="Option: (255) End" size="1"
pos="301" show="0" value="ff">
      <field name="bootp.option.end" showname="Option End: 255" size="1"
pos="301" show="255" value="ff"/>
    </field>
  </proto>
</packet>


You are receiving this mail because:
  • You are watching all bug changes.