Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 2785] New: RSVP message seems not be parsed correctly

Date: Fri, 8 Aug 2008 20:19:04 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2785

           Summary: RSVP message seems not be parsed correctly
           Product: Wireshark
           Version: 1.0.0
          Platform: PC
        OS/Version: Windows XP
            Status: NEW
          Severity: Normal
          Priority: Medium
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: yeonny402@xxxxxxxxxxx


Created an attachment (id=2138)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=2138)
PPP log which contains RSVP messaging between Handset and PDSN

Build Information:
Compiled with GTK+ 2.12.8, with GLib 2.14.6, with WinPcap (version unknown),
with libz 1.2.3, without POSIX capabilities, with libpcre 7.0, with SMI 0.4.5,
with ADNS, with Lua 5.1, with GnuTLS 1.6.1, with Gcrypt 1.2.3, with MIT
Kerberos, with PortAudio V19-devel, with AirPcap.

Running on Windows XP Service Pack 2, build 2600, with WinPcap version 4.0.1
(packet.dll version 4.0.0.901), based on libpcap version 0.9.5, without
AirPcap.

Built using Microsoft Visual C++ 6.0 build 8804
--
It looks like a part of RSVP COMFIRM message is not parsed correctly.
Please see the second record in attached PPP log.
In RSVP message, 

1. ERROR-SPEC is 

00 04 06 01

And this is parsed as 

Length : 4
Object class : ERROR object (6)
C-type : 1
Error node: 0.8.15.1
Flags: 0x61 (InPlace)
Error code : 25 - RSVP Notify Error
Error value : 12571 - unknown


2. CONFIRM is 

00 08 0f 01 61 19 31 1b

This is parsed as

Length : 8
Object class : CONFIRM object (15)
C-type : 1
Receiver address : 97.25.49.27

In ERROR-spec, length is 4 but Error node, Flags, Error code, Error value
are parsed and they are overlapped with next object.(CONFIRM object)
I think those 4 values should not be shown(Error node, Flags, Error code, Error
vaue).
Please check this.


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.