ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 3420] New: MEGACO dissector does not decode multiple trans

Date: Thu, 16 Apr 2009 09:15:23 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3420

           Summary: MEGACO dissector does not decode multiple transactions
                    in a single compact text encoded MEGACO packet properly
           Product: Wireshark
           Version: SVN
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Minor
          Priority: Low
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: balint.reczey@xxxxxxxxxxxx


Created an attachment (id=2944)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=2944)
MEGACO packet

Build Information:
TShark 1.1.4 (SVN Rev 27911)

Copyright 1998-2009 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GLib 2.16.6, with libpcap 0.9.8, with libz 1.2.3.3, with POSIX
capabilities (Linux), with libpcre 7.6, without SMI, without c-ares, with ADNS,
with Lua 5.1, with GnuTLS 2.4.2, with Gcrypt 1.4.1, with MIT Kerberos, without
GeoIP.

Running on Linux 2.6.26-2-686, with libpcap version 0.9.8, GnuTLS 2.4.2, Gcrypt
1.4.1.

Built using gcc 4.3.2.

--
The dissector is not prepared to handle multiple transactions in a compact text
encoded packet.

I think the dissector should be rewritten from scratch because it is too hard
to fix the current parsing logic. It would be better to use a lexical analyzer
instead of the current bracket counting method.


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.