Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 2859] HomePlug Dissector bug Warning

Date: Mon, 8 Sep 2008 14:03:39 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2859





--- Comment #3 from Luca Ceresoli <luca.ceresoli@xxxxxxxxx>  2008-09-08 14:03:38 PDT ---
The packet is supposed to be compliant to HomePlug 1.0
(http://en.wikipedia.org/wiki/HomePlug_Powerline_Alliance)

The spec is available here:
http://www.tandel.be/downloads/INT51X1_Datasheet.pdf
(source: http://www.tandel.be/spip/article.php3?id_article=6)

I think the problem is roughly the following:

The dissector finds a Mac Mgmt Entry Header (byte 0x0f), whose length is 9
(byte 0x10). Being unable to decode its meaning (supposedly not implemented),
it should simply skip ~9 bytes, but it doesn't, so it tries to decode the next
two bytes (0x11 and 0x12) as a new <Mac Mgmt Entry {Header,Length}> pair.
This might bring the decoder in an incorrect state. Not idea what happens after
that.

There might be some conflict with the fact that the packet contains 2 MAC
Control Fields (byte 0x0e).


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.