Wireshark-bugs: [Wireshark-bugs] [Bug 10511] Off-by-one in SMTP dissector
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Mon, 29 Sep 2014 14:53:58 +0000

changed bug 10511


What Removed Added
Status CONFIRMED RESOLVED
Resolution --- NOTABUG

Comment # 1 on bug 10511 from 
After looking at this a bit, I note the following:

The reason for the dissection shown is that the dissector dissects the message
as a command (rather than a response).

The dissector determines whether the message is a command or a response by
checking the destination TCP port to see if it is 25 (or 465).

So: looking at your pcap file I see that *both* the TCP source port and the TCP
destination port are 25 which I would not expect to happen in the real world.

Is this a handcrafted frame ?

Therefore: I'm closing this report as NOTABUG in that I would not expect to see
this in a real world SMTP capture.

If you feel differently, please feel free to re-open the bug and add a further
comment.

You are receiving this mail because:
  • You are watching all bug changes.