https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2843
Summary: Bad PPP-Van Jacobson (VJ) dissection
Product: Wireshark
Version: 0.99.6
Platform: PC
OS/Version: Windows XP
Status: NEW
Severity: Major
Priority: High
Component: Wireshark
AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
ReportedBy: joan@xxxxxxxxx
Build Information:
Version 0.99.6a (SVN Rev 22276)
Copyright 1998-2007 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled with GTK+ 2.10.12, with GLib 2.12.12, with WinPcap (version unknown),
with libz 1.2.3, with libpcre 6.4, with Net-SNMP 5.4, with ADNS, with Lua 5.1,
with GnuTLS 1.6.1, with Gcrypt 1.2.3, with MIT Kerberos, with PortAudio
PortAudio V19-devel, with AirPcap.
Running on Windows XP Service Pack 2, build 2600, without WinPcap, without
AirPcap.
Built using Microsoft Visual C++ 6.0 build 8804
--
Wireshark dissects incorrectly PPP packets with Van Jacobson (VJ) compression.
It adds 2 bytes to the real TCP data lenght and shows irreal TCP problems.
See attached example. It's a TCP connection working properly. File 'PPP' is the
machine with a PPP interface and file 'Lan' is the machine with an Ethernet
interface. The timestamps are not synchronized but packet numbers are
synchronized from packet 4. You can analyze the first TCP connection (port
50876->2404) from packets 6 to 28.
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
