Wireshark-bugs: [Wireshark-bugs] [Bug 12908] New: The "find a packet" tool highlight the second
| Bug ID |
12908
|
| Summary |
The "find a packet" tool highlight the second half of the UTF-16 string in the "Packet Bytes" pane
|
| Product |
Wireshark
|
| Version |
2.2.0
|
| Hardware |
x86
|
| OS |
Windows 7
|
| Status |
UNCONFIRMED
|
| Severity |
Normal
|
| Priority |
Low
|
| Component |
Qt UI
|
| Assignee |
bugzilla-admin@wireshark.org
|
| Reporter |
moh.hassan20@gmail.com
|
Created attachment 14925 [details]
captured file
Build Information:
Version 2.2.0 (v2.2.0-0-g5368c50 from master-2.2)
Copyright 1998-2016 Gerald Combs <gerald@wireshark.org> and contributors.
License GPLv2+: GNU GPL version 2 or later
<http://www.gnu.org/licenses/old-licenses/gpl-2.0.html>
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled (32-bit) with Qt 5.3.2, with WinPcap (4_1_3), with GLib 2.38.0, with
zlib 1.2.8, with SMI 0.4.8, with c-ares 1.11.0, with Lua 5.2.4, with GnuTLS
3.2.15, with Gcrypt 1.6.2, with MIT Kerberos, with GeoIP, with QtMultimedia,
with AirPcap.
Running on 64-bit Windows 7 Service Pack 1, build 7601, with locale
English_United States.1252, with WinPcap version 4.1.3 (packet.dll version
4.1.0.2980), based on libpcap version 1.0 branch 1_0_rel0b (20091008), with
GnuTLS 3.2.15, with Gcrypt 1.6.2, with AirPcap 4.1.0 build 1622.
Intel(R) Core(TM) i5-3470 CPU @ 3.20GHz (with SSE4.2), with 16271MB of
physical memory.
Built using Microsoft Visual C++ 12.0 build 40629
Wireshark is Open Source Software released under the GNU General Public
License.
Check the man page and http://www.wireshark.org for more information.
--
Search for the UTF-16 string "select" in the "Packet Bytes" Pan
-click "find a packet" in toolbar /OR from Edit menu -> find a packet
- select "pack bytes" in first drop-down list
- select "Narrow & Wide" drop-down list
- select string" from drop-down list
- Enter the string "select" in textbox to find
- click "find" button
in the the "Packet Bytes" pane , you find highlight:
00 65 00 63 00 74 e c t
For a screen shoot: http://imgur.com/qJtub28
The string is Unicode UTF-16
It's supposed that the highlight is done for the complete string in hex and
ASCII, but the highlighted string is the second half of the string.
You are receiving this mail because:
- You are watching all bug changes.
