Wireshark-bugs: [Wireshark-bugs] [Bug 5310] Protocol Hierarchy Statistics not properly parsed
Date: Mon, 18 Oct 2010 18:25:11 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5310

--- Comment #4 from Guy Harris <guy@xxxxxxxxxxxx> 2010-10-18 18:25:10 PDT ---
The problem is probably that if you have a header for a protocol, followed by
the payload for that protocol which is a packet for another protocol, that
looks the same in a protocol tree as two packets for the same or a different
protocol - the protocol tree doesn't distinguish between two consecutive chunks
of data which are protocols at the same layer of containment and a chunk of
data which is the header for one protocol followed by a chunk of data which is
the payload for that protocol and a packet for some protocol contained within
the previous protocol.  That confuses the protocol hierarchy code, which
assumes the latter is what's happening.

We'd need a capture to see if that's the case here, although we can probably
find captures for the problem as described in the previous paragraph.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.