Wireshark-users: [Wireshark-users] Regression in sccp fragments handling
From: Ivan Nardi <nardi.ivan@xxxxxxxxx>
Date: Sun, 23 Apr 2017 21:45:07 +0200
Hi I may have found a regression in sccp DT1 fragments handling in the latest 2.2.6 version; everything is fine on 2.2.5 (version details reported below). Using the attached pcap, fragments in pkts 3 and 4 are not correctly reassembled as a ranap id-RelocationResourceAllocation message anymore Am I doing something wrong? Let me know if you need further information Best Regards Ivan PS: it's my first report: should I have filled a bug in bugzilla, instead? PS: checksums in the pcaps may be wrong because of a hand-made effort to anonymize some information Version 2.2.6 (Git Rev Unknown from unknown) Copyright 1998-2017 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors. License GPLv2+: GNU GPL version 2 or later <http://www.gnu.org/licenses/old-licenses/gpl-2.0.html> This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. Compiled (64-bit) with Qt 5.5.1, with libpcap, with POSIX capabilities (Linux), with libnl 3, with GLib 2.48.2, with zlib 1.2.8, with SMI 0.4.8, with c-ares 1.10.0, with Lua 5.2.4, with GnuTLS 3.4.10, with Gcrypt 1.6.5, with MIT Kerberos, with GeoIP, with nghttp2 1.7.1, with QtMultimedia, without AirPcap. Running on Linux 4.4.0-72-generic, with locale LC_CTYPE=en_US.UTF-8, LC_NUMERIC=it_IT.UTF-8, LC_TIME=it_IT.UTF-8, LC_COLLATE=en_US.UTF-8, LC_MONETARY=it_IT.UTF-8, LC_MESSAGES=en_US.UTF-8, LC_PAPER=it_IT.UTF-8, LC_NAME=it_IT.UTF-8, LC_ADDRESS=it_IT.UTF-8, LC_TELEPHONE=it_IT.UTF-8, LC_MEASUREMENT=it_IT.UTF-8, LC_IDENTIFICATION=it_IT.UTF-8, with libpcap version 1.7.4, with GnuTLS 3.4.10, with Gcrypt 1.6.5, with zlib 1.2.8. Intel(R) Core(TM) i7-4810MQ CPU @ 2.80GHz (with SSE4.2) Built using gcc 5.4.0 20160609. Version 2.2.5 (wireshark-2.2.5) Copyright 1998-2017 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors. License GPLv2+: GNU GPL version 2 or later <http://www.gnu.org/licenses/old-licenses/gpl-2.0.html> This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. Compiled (64-bit) with Qt 4.8.7, with libpcap, without POSIX capabilities, without libnl, with GLib 2.48.2, with zlib 1.2.8, without SMI, without c-ares, without Lua, without GnuTLS, without Gcrypt, with MIT Kerberos, without GeoIP, without QtMultimedia, without AirPcap. Running on Linux 4.4.0-72-generic, with locale LC_CTYPE=en_US.UTF-8, LC_NUMERIC=it_IT.UTF-8, LC_TIME=it_IT.UTF-8, LC_COLLATE=en_US.UTF-8, LC_MONETARY=it_IT.UTF-8, LC_MESSAGES=en_US.UTF-8, LC_PAPER=it_IT.UTF-8, LC_NAME=it_IT.UTF-8, LC_ADDRESS=it_IT.UTF-8, LC_TELEPHONE=it_IT.UTF-8, LC_MEASUREMENT=it_IT.UTF-8, LC_IDENTIFICATION=it_IT.UTF-8, with libpcap version 1.7.4, with zlib 1.2.8. Intel(R) Core(TM) i7-4810MQ CPU @ 2.80GHz (with SSE4.2) Built using gcc 5.4.1 20160904.
Attachment:
sccp_frags_regression3.pcap
Description: application/vnd.tcpdump.pcap
- Follow-Ups:
- Re: [Wireshark-users] Regression in sccp fragments handling
- From: Guy Harris
- Re: [Wireshark-users] Regression in sccp fragments handling
- Prev by Date: Re: [Wireshark-users] Wireshark Tabs
- Next by Date: Re: [Wireshark-users] Regression in sccp fragments handling
- Previous by thread: Re: [Wireshark-users] Wireshark Tabs
- Next by thread: Re: [Wireshark-users] Regression in sccp fragments handling
- Index(es):