Wireshark-bugs: [Wireshark-bugs] [Bug 7248] New: The Wireshark and tshark TCP conversations stat
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Fri, 11 May 2012 10:18:42 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7248

           Summary: The Wireshark and tshark TCP conversations stats
                    tables aggregate reused connections into a single line
                    item
           Product: Wireshark
           Version: 1.7.x (Experimental)
          Platform: x86
        OS/Version: Windows XP
            Status: NEW
          Severity: Minor
          Priority: Low
         Component: Wireshark
        AssignedTo: bugzilla-admin@xxxxxxxxxxxxx
        ReportedBy: robert@xxxxxxxxxxxxxx


Robert Bullen <robert@xxxxxxxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Attachment #8415|                            |review_for_checkin?
              Flags|                            |

Created attachment 8415
  --> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=8415
This patch offers a fix for the 1.7 trunk. This bug exists in 1.6 as well; I
recommend backporting, if possible.

Build Information:
TShark 1.7.2-USBank-NoZLib-00x (SVN Rev 42576 from /trunk)

Copyright 1998-2012 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (32-bit) with GLib 2.28.8, with WinPcap (4_1_2), without libz, without
POSIX capabilities, with SMI 0.4.8, with c-ares 1.7.1, with Lua 5.1, without
Python, with GnuTLS 2.12.18, with Gcrypt 1.4.6, with MIT Kerberos, with GeoIP.

Running on Windows XP Service Pack 3, build 2600, with WinPcap version 4.1.2
(packet.dll version 4.1.0.2001), based on libpcap version 1.0 branch 1_0_rel0b
(20091008).

Built using Microsoft Visual C++ 10.0 build 40219
--
The TCP dissector properly distinguishes TCP conversations in the face of {
address, port, address, port } quadruple reuse. However, the TCP Conversations
stats tables do not reflect this in both Wireshark and tshark. Instead,
multiple TCP streams having the same quadruple are aggregated into a single
line item.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.