Wireshark-bugs: [Wireshark-bugs] [Bug 3898] New: "CPHA - Check Point High Availability Protocol"
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Fri, 14 Aug 2009 02:16:41 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3898

           Summary: "CPHA - Check Point High Availability Protocol" - fields
                    are not parsed correctly
           Product: Wireshark
           Version: 1.2.0
          Platform: Other
        OS/Version: Windows XP
            Status: NEW
          Severity: Normal
          Priority: Medium
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: sergeis@xxxxxxxxxxxxxx


Created an attachment (id=3510)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=3510)
WireShark = Version 1.2.0 : does not parse the fields correctly 

Build Information:
WireShark = Version 1.2.0 (SVN Rev 28753)
OS = Windows XP

--
"CPHA - Check Point High Availability Protocol"

2 fields in CPHA packet called "MY_STATE" are not parsed correctly.
WireShark uses these filters to show these fields :
frame[70:1] == 04 
frame[71:1] == 02

The parsing in version 1.2.0 is :
4 = Ready
2 = Initializing
(see the attached screenshot - "WireShark_1.2.0_CPHA_Bug")

The correct parsing should be :
4 = Active/Active-Attention
2 = Standby
1 = Initializing
0 = Down/Dead

For example, old versions of WireShark (0.9X), parse these fields correctly -
for example, WireShark = Version 0.99.2 (SVN Rev 18752)
(see the attached screenshot - "WireShark_0.99.2_CPHA_correct_parsing")


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.