Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 8970] New: Error in IPv6 address decompression from 6LoWPAN packets

[bugzilla-daemon@xxxxxxxxxxxxx]

Bug ID	8970
Summary	Error in IPv6 address decompression from 6LoWPAN packets
Classification	Unclassified
Product	Wireshark
Version	1.11.x (Experimental)
Hardware	x86
OS	Ubuntu
Status	UNCONFIRMED
Severity	Minor
Priority	Low
Component	Dissection engine (libwireshark)
Assignee	bugzilla-admin@wireshark.org
Reporter	jpgamaral@gmail.com

Created attachment 11269 [details]
capture file

Build Information:
Version 1.11.0 (SVN Rev 50554 from /trunk)

Copyright 1998-2013 Gerald Combs <gerald@wireshark.org> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (32-bit) with GTK+ 2.24.17, with Cairo 1.12.14, with Pango 1.32.5,
with
GLib 2.36.0, with libpcap, with libz 1.2.7, without POSIX capabilities, without
libnl, without SMI, without c-ares, without ADNS, without Lua, without Python,
without GnuTLS, without Gcrypt, without Kerberos, without GeoIP, without
PortAudio, with AirPcap.

Running on Linux 3.8.0-26-generic, with locale en_US.UTF-8, with libpcap
version
1.3.0, with libz 1.2.7, without AirPcap.

Built using gcc 4.7.3.
--
Hello,

After some careful reading, I think there's a bug in Wireshark's IPv6 address
decompression from 6LoWPAN packets. The 6LoWPAN header of the packets is IPHC.

http://i39.tinypic.com/2hdpbmg.png

Where it shows fe80::ff:fe00:2, it should instead show fe80::22:ff:fe00:2,
because 0x22 is the PAN ID (by default).

http://i42.tinypic.com/mkhpvp.png

References:
* https://tools.ietf.org/html/rfc4944#page-13
*
http://tinyos.stanford.edu/tinyos-wiki/index.php/BLIP_2.0_Tutorial#Static_Address_Mode

---

      You are receiving this mail because:

• You are watching all bug changes.