Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 5058] New: MySQL dissector doesn't dissect query responses

Date: Tue, 27 Jul 2010 15:09:46 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5058

           Summary: MySQL dissector doesn't dissect query responses
           Product: Wireshark
           Version: SVN
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Minor
          Priority: Low
         Component: TShark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: brandonskari@xxxxxxxxx


Created an attachment (id=4970)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=4970)
MYSQL query and response sample

Build Information:
wireshark 1.5.0 (SVN Rev 33643 from /trunk)

Copyright 1998-2010 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GTK+ 2.18.3, (32-bit) with GLib 2.22.3, with libpcap 1.0.0, with
libz 1.2.3.3, without POSIX capabilities, without libpcre, without SMI, without
c-ares, without ADNS, without Lua, without Python, without GnuTLS, without
Gcrypt, without Kerberos, without GeoIP, without PortAudio, without AirPcap.

Running on Linux 2.6.31-14-generic-pae, with libpcap version 1.0.0, with libz
1.2.3.3.

Built using gcc 4.4.1.
--
The MySQL dissector doesn't dissect responses to queries. It correctly
separates the packet into the individual MySQL protocol pieces, but the pieces
that contain the row and column data are dissected with the label "FIXME -
dissector is incomplete". 

I've attached a sample capture file that includes some queries and responses;
the problem in question is in the packets labelled "Response" under the "Info"
column. Expanding the "MySQL Protocol" sections in those packets shows displays
the message "FIXME - dissector is incomplete" along with a generic "Extra data"
description.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.