Wireshark-bugs: [Wireshark-bugs] [Bug 10280] FR decodes header correctly, but processes octets a
Date: Wed, 24 Sep 2014 01:34:57 +0000

changed bug 10280


What Removed Added
Status UNCONFIRMED INCOMPLETE
CC   jeff.morriss.ws@gmail.com
Ever confirmed   1

Comment # 2 on bug 10280 from
The Frame Relay dissector knows that it's reached the end of the address but
it's trying to figure out what comes next.  (You can see this by looking at the
SITA-Protocols.cap file on the SampleCaptures page on the wiki.)  In your case
it's falling into this code:

~~~
      /*
       * If the data does not start with unnumbered information (03) and
       * the DLCI# is not 0, then there may be Cisco Frame Relay encapsulation.
       */
~~~

I suppose if the Cisco Type is unknown it should not try to display it as a
Cisco encapsulation and just show it as data.

Is there any encapsulation between the Frame Relay portion and the data
portion?

It would really help to have a sample capture in order to attempt a fix.


You are receiving this mail because:
  • You are watching all bug changes.