Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 5470] New: TShark "-T fields -e smb.path -e smb.file" truncates last char

[bugzilla-daemon@xxxxxxxxxxxxx]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5470

           Summary: TShark "-T fields -e smb.path -e smb.file" truncates
                    last char
           Product: Wireshark
           Version: 1.4.2
          Platform: Other
        OS/Version: Windows 7
            Status: NEW
          Severity: Normal
          Priority: Low
         Component: TShark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: guy.other@xxxxxxxxx


Build Information:
Version 1.4.2 (SVN Rev 34959 from /trunk-1.4)
--
When using TShark It sometimes truncates the last char from the path and file
name.
This is the command I used:
tshark.exe -r small.pcap  -T fields -e smb.cmd -e smb.path -e smb.file
When running this on the attached capture file the path field shows up
incorrectly as:
"0x75    \\\\NETSTORE4\\ORACLIEN    "

When I run it without fields i.e. using:
tshark.exe -r small.pcap  
The path shows correctly:
"  8   0.000550  172.31.4.12 -> 147.234.244.48 SMB Tree Connect AndX Request,
Path: \\NETSTORE4\ORACLIENT"

The same thing happens with the file name.

The issue occurs in the latest version 1.4.2. I'm running the x64 bit version
on a Windows machine.
The operating system has both Hebrew and English languages installed.
The issue does not happen in the previous stable release: Version 1.2.13 (SVN
Rev 34960). I tested this on the same machine and settings.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.