Wireshark-bugs: [Wireshark-bugs] [Bug 1207] New: The wildcard mechanism for Termination ID of H2
Date: Mon, 6 Nov 2006 10:23:46 +0000 (GMT)

           Summary: The wildcard mechanism for Termination ID of H248
                    message is decoded oppositely between ALL and CHOOSE.
           Product: Wireshark
           Version: 0.99.4
          Platform: PC
        OS/Version: Windows XP
            Status: NEW
          Severity: Major
          Priority: Medium
         Component: TShark
        AssignedTo: [email protected]
        ReportedBy: [email protected]

Build Information:
Version 0.99.4 (SVN Rev 19757)

Copyright 1998-2006 Gerald Combs <[email protected]> and contributors.
This is free software; see the source for copying conditions. There is NO

Compiled with GTK+ 2.6.9, with GLib 2.6.6, with WinPcap (version unknown), with
libz 1.2.3, with libpcre 6.4, with Net-SNMP 5.3.1, with ADNS, with Lua 5.1,
GnuTLS 1.5.1, with Gcrypt 1.2.3, with MIT Kerberos, with PortAudio <= V18, with

Running on Windows XP Service Pack 2, build 2600, with WinPcap version 3.1
(packet.dll version 3, 1, 0, 27), based on libpcap version 0.9[.x], without

Built using Microsoft Visual C++ 6.0 build 8804

Wireshark is Open Source Software released under the GNU General Public

Check the man page and http://www.wireshark.org for more information.
For H248 message, when the termination ID is wildcarded, it is decoded
incorrectly ie the ALL wilcard is decoded as CHOOSE wildcard, and the CHOOSE
wild card is decoded as ALL wildcard.

The information below is taken from some decoded messages of the ADD command of
H248 message from the middle window:

0... .... = Wildcard Mode: All (0)
1... .... = Wildcard Mode: Choose (1)

However, in the Annex A of H248 specification, it says :
A wildcarding field is one octet in length. Bit 7 (the
most significant bit) of this octet specifies what type of wildcarding is
invoked: if the bit value
equals 1, then the ALL wildcard is used; if the bit value if 0, then the CHOOSE
wildcard is used.

Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.