Wireshark-bugs: [Wireshark-bugs] [Bug 5010] New: colorisation error: TTL 255 for multicast packe
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Thu, 15 Jul 2010 00:50:21 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5010

           Summary: colorisation error: TTL 255 for multicast packets is
                    not (in any case) an error
           Product: Wireshark
           Version: 1.2.9
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Normal
          Priority: Low
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: fh2010ws@xxxxxxxxxxx


Build Information:
2010-07-15 09:16:36.440 defaults[3503:10b] 
The domain/default pair of (kCFPreferencesAnyApplication, AppleHighlightColor)
does not exist
wireshark 1.2.9 (SVN Rev 33171)

Copyright 1998-2010 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GTK+ 2.12.9, (32-bit) with GLib 2.16.3, with libpcap 0.9.5, with
libz 1.2.3, without POSIX capabilities, with libpcre 7.8, with SMI 0.4.8, with
c-ares 1.5.3, with Lua 5.1, with GnuTLS 2.6.2, with Gcrypt 1.4.3, with MIT
Kerberos, without GeoIP, with PortAudio V19-devel (built Nov 14 2008), without
AirPcap.

Running on Darwin 9.8.0 (MacOS 10.5.8), with libpcap version 0.9.5, GnuTLS
2.6.2, Gcrypt 1.4.3.

Built using gcc 4.0.1 (Apple Inc. build 5488).

--
VRRP packets http://www.faqs.org/rfcs/rfc2338.html are required to have a TTL
of 255

=> the coloring rule "TTL low or unexpected" matches but should not.

Either the "Routing" rule must be placed before "TTL low or unexpected" or the
later must be completed with sth like "and not ( ip.dst==224.0.0.18 and
ip.ttl==255).

The "Expert Info" does not match as well (search for '"Time To Live" > 1')

Regards
Frank

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.