Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 12276] tshark crashes when trying to export to pdml

[bugzilla-daemon@xxxxxxxxxxxxx]

Comment # 5 on bug 12276 from Sotiris Antoniadis

Hi,

Thank you for your quick response!

I downloaded both tar files from 14556 and 14557 and followed the below
procedure:

1. Run the autogen.sh
2. ./configure
3. make
4. make install 

Patch from 14556 produced an error during make and aborted, while patch from
14557 successfully completed all above steps. However, when tried to run tshark
with -T pdml, core dumped- error showed up again. Do you think this is the
correct way to run the patch? Output is:

Running as user "root" and group "root". This could be dangerous.
<?xml version="1.0"?>
<?xml-stylesheet type="text/xsl" href=""
<!-- You can find pdml2html.xsl in /usr/share/wireshark or at
https://code.wireshark.org/review/gitweb?p=wireshark.git;a=blob_plain;f=pdml2html.xsl.
-->
<pdml version="0" creator="wireshark/2.1.0-2370-g8def5c4" time="Wed Mar 23
11:46:24 2016" capture_file="">
Capturing on 'em1'
<packet>
  <proto name="geninfo" pos="0" showname="General information" size="60">
    <field name="num" pos="0" show="1" showname="Number" value="1" size="60"/>
    <field name="len" pos="0" show="60" showname="Frame Length" value="3c"
size="60"/>
    <field name="caplen" pos="0" show="60" showname="Captured Length"
value="3c" size="60"/>
    <field name="timestamp" pos="0" show="Mar 23, 2016 11:46:25.174195000 EET"
showname="Captured Time" value="1458726385.174195000" size="60"/>
  </proto>
  <proto name="frame" showname="Frame 1: 60 bytes on wire (480 bits), 60 bytes
captured (480 bits) on interface 0" size="60" pos="0">
    <field name="frame.interface_id" showname="Interface id: 0 (em1)" size="0"
pos="0" show="0"/>
    <field name="frame.encap_type" showname="Encapsulation type: Ethernet (1)"
size="0" pos="0" show="1"/>
    <field name="frame.time" showname="Arrival Time: Mar 23, 2016
11:46:25.174195000 EET" size="0" pos="0" show="Mar 23, 2016 11:46:25.174195000
EET"/>
    <field name="frame.offset_shift" showname="Time shift for this packet:
0.000000000 seconds" size="0" pos="0" show="0.000000000"/>
    <field name="frame.time_epoch" showname="Epoch Time: 1458726385.174195000
seconds" size="0" pos="0" show="1458726385.174195000"/>
    <field name="frame.time_delta" showname="Time delta from previous captured
frame: 0.000000000 seconds" size="0" pos="0" show="0.000000000"/>
    <field name="frame.time_delta_displayed" showname="Time delta from previous
displayed frame: 0.000000000 seconds" size="0" pos="0" show="0.000000000"/>
    <field name="frame.time_relative" showname="Time since reference or first
frame: 0.000000000 seconds" size="0" pos="0" show="0.000000000"/>
    <field name="frame.number" showname="Frame Number: 1" size="0" pos="0"
show="1"/>
    <field name="frame.len" showname="Frame Length: 60 bytes (480 bits)"
size="0" pos="0" show="60"/>
    <field name="frame.cap_len" showname="Capture Length: 60 bytes (480 bits)"
size="0" pos="0" show="60"/>
    <field name="frame.marked" showname="Frame is marked: False" size="0"
pos="0" show="0"/>
    <field name="frame.ignored" showname="Frame is ignored: False" size="0"
pos="0" show="0"/>
    <field name="frame.protocols" showname="Protocols in frame:
eth:ethertype:ip:tcp" size="0" pos="0" show="eth:ethertype:ip:tcp"/>
  </proto>
  <proto name="eth" showname="Ethernet II, Src: CiscoInc_79:64:40
(74:26:ac:79:64:40), Dst: Dell_fa:7c:b1 (00:1d:09:fa:7c:b1)" size="14" pos="0">
    <field name="eth.dst" showname="Destination: Dell_fa:7c:b1
(00:1d:09:fa:7c:b1)" size="6" pos="0" show="00:1d:09:fa:7c:b1"
value="001d09fa7cb1">
      <field name="eth.dst_resolved" showname="Destination (resolved):
Dell_fa:7c:b1" hide="yes" size="6" pos="0" show="Dell_fa:7c:b1"
value="001d09fa7cb1"/>
      <field name="eth.addr" showname="Address: Dell_fa:7c:b1
(00:1d:09:fa:7c:b1)" size="6" pos="0" show="00:1d:09:fa:7c:b1"
value="001d09fa7cb1"/>
      <field name="eth.addr_resolved" showname="Address (resolved):
Dell_fa:7c:b1" hide="yes" size="6" pos="0" show="Dell_fa:7c:b1"
value="001d09fa7cb1"/>
**
ERROR:ftypes.c:607:fvalue_get_sinteger64: assertion failed:
(fv->ftype->get_value_sinteger64)
      <field name="eth.lg" showname=".... ..0. .... .... .... .... = LG bit:
Globally unique address (factory default)" size="3" pos="0" show="0"
value="Aborted (core dumped)

Is there any way to overcome this issue?

Br,
Sotiris

---

      You are receiving this mail because:

• You are watching all bug changes.