Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 5141] WCCP Web-Cache Identity Info incorrect "Item length

Date: Tue, 5 Jul 2011 01:33:32 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5141

--- Comment #2 from squid3@xxxxxxxxxxxxx 2011-07-05 01:33:30 PDT ---
Created an attachment (id=6615)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=6615)
Squid sending HERE_I_AM with mask assignment info

This attachment contains a mask assignment packet bit-level compliant with the
Wilson draft for WCCPv2 (draft-wilson-wccp-v2-12-oct-2001.txt).

Wireshark reports this packets Web-Cache Identity Info section as 32 instead of
44.

I debugged by padding the structure to 44 bytes to see what wireshark is able
to parse. The missing piece in fact appears to be the WCCP draft specified "T"
flag (0x4000) indicating that the "assignment data" holds several masks, which
are shorted than the hash buckets.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.