ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 1392] RPC portmap classification switched to TCP after fil

Date: Thu, 8 Nov 2007 06:52:12 +0000 (GMT)
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1392





------- Comment #5 from did447@xxxxxxxxx  2007-11-08 06:52 GMT -------
(In reply to comment #3)
> What happens with 0.9.5?  It's not happening with top-of-tree SVN for me.
> 

The culprit is in packet-rpc.c:dissect_rpc_fragment()

seq = tcpinfo->seq + offset;

With relative sequence numbers tcpinfo->seq is 1 for both sides and it screws 
rpc_reassembly_table table.


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.