Wireshark-bugs: [Wireshark-bugs] [Bug 4561] TCP Analysis Ignores Vlan Tags
Date: Mon, 25 Aug 2014 14:14:19 +0000

changed bug 4561


What Removed Added
CC   carsten.langer@gmx.de

Comment # 5 on bug 4561 from
(In reply to Guy Harris from comment #3)
> In addition, this could also be an issue with various sorts of tunneling (or
> "other sorts of tunneling", if you view VLANs as a form of tunneling) - if a
> packet came in on an Ethernet, got wrapped in some sort of tunnel, and then
> sent out over the same Ethernet, you'd have two copies of the same packet on
> that Ethernet.

True. Find attached an example of a mixed trace from mobile network Gn (inside
GTP tunnel) and Gi (no GTP tunnel). Again the TCP dissector gets confused by
the same user plane packet appearing inside and outside of the tunnel.

My request is to make the TCP dissector distinguish between flows inside a
tunnel and outside of it. For GTP tunnel it is clear that all traffic is either
in or out, so a packet with GTP tunnel cannot belong to the same flow as a
packet without GTP tunnel.

For VLAN I know cases where UL traffic and DL traffic belong to different VLAN,
still to the same flow. Thus a differentiation according to VLAN id must be
configurable.


You are receiving this mail because:
  • You are watching all bug changes.