Wireshark-dev: [Wireshark-dev] Re: DHCP dissector giving up too early ?

From: Martin Nyhus <martin@xxxxxxxxx>
Date: Wed, 05 Mar 2025 23:09:41
On 05/03/2025 16:09, Chris Hall wrote:
I enclose a short .pcapng which includes one DHCP Discover and one DHCP Request message.  Both contain the same malformed Option 124 (Vendor- Identifying Vendor Class).

The parsing of the pcap you attached seems a lot better after commit 6108954f [0] which hasn't been released yet as far as I can see. If issue 20097 [1] covers the problem you are seeing you probably need a future release that includes that fix.

Martin


[0] https://gitlab.com/wireshark/wireshark/-/commit/6108954f9bb0b5c5d0a7d4c05efa8a06696f31ec
[1] https://gitlab.com/wireshark/wireshark/-/issues/20097