Wireshark-bugs: [Wireshark-bugs] [Bug 6925] New: IPv6 TCP packets with invalid hop-by-hop header
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Thu, 8 Mar 2012 23:05:14 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6925

           Summary: IPv6 TCP packets with invalid hop-by-hop headers are
                    not discarded.
           Product: Wireshark
           Version: 1.6.5
          Platform: x86
        OS/Version: Mac OS X 10.7
            Status: NEW
          Severity: Normal
          Priority: Low
         Component: Wireshark
        AssignedTo: bugzilla-admin@xxxxxxxxxxxxx
        ReportedBy: jullrich@xxxxxxxx


Created attachment 7981
  --> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=7981
Packet capture with bad hop by hop header

Build Information:
Version 1.6.5 (SVN Rev 40429 from /trunk-1.6)
--
When reassembling TCP segments ("Follow TCP Stream"), TCP segments with invalid
hop-by-hop headers, that are discarded by the target system, are used. As a
result, the TCP stream is reassembled wrong if two segments use the same serial
numbers, but the first one includes a bad hop-by-hop header.

See attached pcap for an example. The connection actually used the host name
"sec546.com", but Wireshark's reassembly wrongly shows "xxxxxx.com".

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.