ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 5846] A new dissector for uTorrent Transport Protocol

Date: Tue, 19 Apr 2011 18:41:17 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5846

--- Comment #5 from Xiao Xiangquan <xiaoxiangquan@xxxxxxxxx> 2011-04-19 18:41:17 PDT ---
The capture is real data when I downloaded something with uTorrent. My ip is
59.108.116.180

I don't think it's the latest spec in use, as the max of version field has
reached 4.

But the latest official spec in doc is still saying "The current version is 1".
So I'm just going to keep in step with the official doc.

Or we can work on libutp? https://github.com/bittorrent/libutp

(In reply to comment #4)
> A question about the attached capture file:
> 
> 
> Does the capture contain real, valid data ?
> 
> 1. The values for the Window Size and the Sequence Numbers fields seem kind of
> weird.
> 
> 2. All the frames in the file from  219.85.150.76 (port 48493) appear to be
> responses to frames from 59.108.116.180 (port 55267).
> 
> Each of those messages claims to have an extension type of 2 (Extension Bits).
> 
> However, as dissected, in each case the length of the field is 0.
> 
> Looking at the data it appears to me that in most of those frames a valid
> Extension Bits field [00 08 00 00 00 00 00 00 00 00] does exist in the message
> but following a 3 byte mystery field.
> 
> In some cases the frame just ends with the 3 byte mystery field and seems to be
> missing the Extension Bits field altogether. 
> 
> 
> Any thoughts ?
> 
> Is the spec referenced by Alex the latest ?
> 
> /* Specifications: BEP-0029
> http://www.bittorrent.org/beps/bep_0029.html

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.