Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 11580] Incorrect parsing of NTP datagrams with SHA1 based message authenticati

Wireshark-bugs: [Wireshark-bugs] [Bug 11580] Incorrect parsing of NTP datagrams with SHA1 based

Date: Fri, 09 Oct 2015 11:41:06 +0000

Comment # 8 on bug 11580 from Pascal Quantin

According to the dissector code, everything that is after the timestamp and
bigger than the trailing MAC is considered as extensions.
So the length alone is not a good heuristic (as seen in this bug report).

You are receiving this mail because:

You are watching all bug changes.

References:
- [Wireshark-bugs] [Bug 11580] New: Incorrect parsing of NTP datagrams with SHA1 based message authentication code (MAC)
  - From: bugzilla-daemon

Prev by Date: [Wireshark-bugs] [Bug 11580] Incorrect parsing of NTP datagrams with SHA1 based message authentication code (MAC)
Next by Date: [Wireshark-bugs] [Bug 11576] RPC packets aren't being dissected
Previous by thread: [Wireshark-bugs] [Bug 11580] Incorrect parsing of NTP datagrams with SHA1 based message authentication code (MAC)
Next by thread: [Wireshark-bugs] [Bug 11580] Incorrect parsing of NTP datagrams with SHA1 based message authentication code (MAC)
Index(es):
- Date
- Thread