Wireshark-bugs: [Wireshark-bugs] [Bug 1417] New: Inaccurate RTCP Parsing

From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Mon, 5 Mar 2007 16:33:22 +0000 (GMT)

http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1417

           Summary: Inaccurate RTCP Parsing
           Product: Wireshark
           Version: unspecified
          Platform: PC
        OS/Version: Windows XP
            Status: NEW
          Severity: Normal
          Priority: Medium
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: brettcclark@xxxxxxxxxxx


Build Information:
wireshark 0.99.3 (SVN Rev 19011)

Copyright 1998-2006 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GTK+ 2.6.9, with GLib 2.6.6, with WinPcap (version unknown),
with libz 1.2.3, with libpcre 6.4, with Net-SNMP 5.3.1, with ADNS, with Lua
5.1.


Running with WinPcap version 3.1 (packet.dll version 3, 1, 0, 27), based on
libp
cap version 0.9[.x] on Windows XP Service Pack 2, build 2600.

--
When parsing RTCP packets, the RFC 3550 states that the 'Length' field in the
RTCP common header, should be the size of data which follows the header.  The
length field in the packet denotes size of this data in WORDs (the RFC seems to
define WORD = 4 bytes).  You have just copied this size directly into your
Packet Details window instead of turning it into bytes.  Thus, you need to
multiply the Length field by 4 to get an accurate byte count.


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.