Wireshark · Ethereal-users: Re: [Ethereal-users] Tethereal segmentation faults

["Martin Regner" <martin.regner@xxxxxxxxx>]

Ulf Lamping wrote:
> Jacobs, Michael wrote:
> > I believe I have run across a bug with tethereal but wanted to make 
> > sure.  I use tethereal to capture
> >
> > VoIP traffic (SIP in this case) and then use the -v functions for 
> > statistics.
> >
> >  
> >
> > I have run into a situation where tethereal will segmentation fault 
> > when SIP traffic is using port number
> >
> > 5062. When using 5060 everything is fine.
> >
> >  
> >
> > Here is my setup:
> >
> >  
> >
> > tethereal 0.10.3
> This is a real old version, you may try recent 0.10.14 before submitting 
> a bug, there is a lot of VoIP work done since then ...
>
> Regards, ULFL

0.10.3 has a crash problem in SIP-dissector

http://www.ethereal.com/appnotes/enpa-sa-00014.html

The 0.10.3 version may crash when you select a SIP packet:
-------------------------------------------------------------
-When the SIP packet is sent over TCP

-When the SIP packet is sent over UDP but neither to or from the default
port 5060
and not to or from a port defined as "Decode As../SIP"

-When the preference setting for UDP dissector is set to dissect by
heuristics first
(Edit/Preferences../Protocols/UDP/Try heursitic sub-dissectors first).