Wireshark-users: Re: [Wireshark-users] Assertion failure proto.c:2902 for SNMP V3 authPriv
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Jaap Keuter <jaap.keuter@xxxxxxxxx>
Date: Thu, 19 Jul 2007 18:38:17 +0200
Hi,

Tried it on:

Version 0.99.7 (SVN Rev 22353)
Compiled with GTK+ 2.10.13, with GLib 2.12.12, with libpcap 0.9.5, with libz 1.2.3.3, with libpcre 6.7, with Net-SNMP 5.2.3, with ADNS, without Lua, with GnuTLS 1.6.3, with Gcrypt 1.2.4, with MIT Kerberos, with PortAudio PortAudio V19-devel, without AirPcap. 

Running on Linux 2.6.21-2-k7, with libpcap version 0.9.5.

Built using gcc 4.1.3 20070629 (prerelease) (Debian 4.1.2-13).

No problems.

Thanx,
Jaap


Rajasankar K wrote:

Please find the capture file attached. And I could open these files in the MS-windows version (same build 22293). The problem happens when I take the source release and install in Linux.

-- Raja.

----- Original Message ----
From: Luis EG Ontanon <luis.ontanon@xxxxxxxxx>
To: Community support list for Wireshark <wireshark-users@xxxxxxxxxxxxx>
Sent: Monday, 16 July 2007 11:02:07
Subject: Re: [Wireshark-users] Assertion failure proto.c:2902 for SNMP V3 authPriv

Given the fact that that you already sent us your passwords could you
first change them and then send me (or the list if the machine is not
reachable from internet) a file with the packet that triggers the bug?

Thanks,
Luis.

On 7/16/07, Rajasankar K <rajasankark@xxxxxxxxx> wrote:

Hi,

I have version  wireshark-0.99.7-SVN-22293 compiled and installed in "Linux myhost 2.6.9-22.ELsmp #1 SMP Mon Sep 19 18:32:14 EDT 2005 i686 i686 i386 GNU/Linux". When I try to open a capture file I see the following and cannot see the encrypted contents. The packets have both auth and privacy enabled.

    msgData: encryptedPDU (1)
        encryptedPDU: 0B8B42273BEAF68B62709A135537338FA09223A373C8550D...
[Dissector bug, protocol SNMP: proto.c:2902: failed assertion "tvb != ((void *)0
) || *length == 0"]

I have the following entry in ~/.wireshark/snmp_users file.
800000A103122334455667, "admin_0016b50a9734", "SHA1", "TOOLS TEAM","AES","TOOLS
TEAM"


I can see the same error messsage for the following bug in bugzilla, "[Bug 1638] SMB Pipe dissector bug on certain      packets". The resolution says it's fixed in SVN 22053. I'm currently using 22293.

Any clues about this problem?

-- Raja.