Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 1249] New: udp protocol analysis - several problems

Date: Tue, 28 Nov 2006 14:18:02 +0000 (GMT)
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1249

           Summary: udp protocol analysis - several problems
           Product: Wireshark
           Version: 0.99.4
          Platform: PC
        OS/Version: Windows 2000
            Status: NEW
          Severity: Major
          Priority: Medium
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: work@xxxxxxxx


Build Information:
Version 0.99.4 (SVN Rev 19757)

Copyright 1998-2006 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GTK+ 2.6.9, with GLib 2.6.6, with WinPcap (version unknown), with
libz 1.2.3, with libpcre 6.4, with Net-SNMP 5.3.1, with ADNS, with Lua 5.1,
with
GnuTLS 1.5.1, with Gcrypt 1.2.3, with MIT Kerberos, with PortAudio <= V18, with
AirPcap.

Running on Windows 2000 Service Pack 4, build 2195, with WinPcap version 3.1
(packet.dll version 3, 1, 0, 27), based on libpcap version 0.9[.x], without
AirPcap.

Built using Microsoft Visual C++ 6.0 build 8804

Wireshark is Open Source Software released under the GNU General Public
License.

Check the man page and http://www.wireshark.org for more information.
--
Several problems with the UDP segment analysis;
1. invalid checksum are correctly marked up in black to indicate that they are
bad, but;
a) menu; "analyse" --> "expert info" doesn't show the invalid checksum as a
warning or error
b) no description in the 'info' column indicating why this is a bad segment

2. invalid lengths are marked as "incorrect" when explicitly looking at the
decoded length field, but;
a) frame not marked up in black & no description in the info column
b) "expert info" doesn't show a problem


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.