Wireshark-bugs: [Wireshark-bugs] [Bug 3195] New: Add E100 encapsulation packet dissector
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3195
Summary: Add E100 encapsulation packet dissector
Product: Wireshark
Version: 1.0.5
Platform: Macintosh
OS/Version: Mac OS X 10.5
Status: NEW
Severity: Normal
Priority: Medium
Component: Wireshark
AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
ReportedBy: bhiggins@xxxxxxxxx
Build Information:
eng-6-36:wireshark-1.0 bhiggins$ ./wireshark -v
wireshark 1.0.6 (SVN Rev 27211)
Copyright 1998-2008 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled with GTK+ 2.14.7, with GLib 2.18.3, with libpcap 0.9.5, with libz
1.2.3, without POSIX capabilities, without libpcre, without SMI, without ADNS,
without Lua, without GnuTLS, without Gcrypt, with MIT Kerberos, without
PortAudio, without AirPcap.
NOTE: this build doesn't support the "matches" operator for Wireshark filter
syntax.
Running on Darwin 9.6.0 (MacOS 10.5.6), with libpcap version 0.9.5.
Built using gcc 4.0.1 (Apple Inc. build 5465).
--
Add E100 encapsulation packet type to the dissectors.
E100 is an Arbor Networks router, which can redirect packets through an AUX
port, and which prepends a header to each redirected packet. This dissector
should detect these packets, and display them in wireshark.
During testing, OICQ dissector was incorrectly handling E100 packets, because
the E100 packets were being sent via UDP port 8000. A fix for this is included
in Wireshark 1.1, so I am including that update in my requested diff.
I fuzz tested the code for 1000 passes, and all reported 'OK'.
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
