http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1207
Summary: The wildcard mechanism for Termination ID of H248
message is decoded oppositely between ALL and CHOOSE.
Product: Wireshark
Version: 0.99.4
Platform: PC
OS/Version: Windows XP
Status: NEW
Severity: Major
Priority: Medium
Component: TShark
AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
ReportedBy: pubate.satienpoch@xxxxxxxxx
Build Information:
Version 0.99.4 (SVN Rev 19757)
Copyright 1998-2006 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled with GTK+ 2.6.9, with GLib 2.6.6, with WinPcap (version unknown), with
libz 1.2.3, with libpcre 6.4, with Net-SNMP 5.3.1, with ADNS, with Lua 5.1,
with
GnuTLS 1.5.1, with Gcrypt 1.2.3, with MIT Kerberos, with PortAudio <= V18, with
AirPcap.
Running on Windows XP Service Pack 2, build 2600, with WinPcap version 3.1
(packet.dll version 3, 1, 0, 27), based on libpcap version 0.9[.x], without
AirPcap.
Built using Microsoft Visual C++ 6.0 build 8804
Wireshark is Open Source Software released under the GNU General Public
License.
Check the man page and http://www.wireshark.org for more information.
--
For H248 message, when the termination ID is wildcarded, it is decoded
incorrectly ie the ALL wilcard is decoded as CHOOSE wildcard, and the CHOOSE
wild card is decoded as ALL wildcard.
The information below is taken from some decoded messages of the ADD command of
H248 message from the middle window:
0... .... = Wildcard Mode: All (0)
1... .... = Wildcard Mode: Choose (1)
However, in the Annex A of H248 specification, it says :
A wildcarding field is one octet in length. Bit 7 (the
most significant bit) of this octet specifies what type of wildcarding is
invoked: if the bit value
equals 1, then the ALL wildcard is used; if the bit value if 0, then the CHOOSE
wildcard is used.
--
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
