Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 3650] New: IEC 60870-5-104 dissector decodes nothing

Date: Fri, 3 Jul 2009 00:16:09 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3650

           Summary: IEC 60870-5-104 dissector decodes nothing
           Product: Wireshark
           Version: 1.2.0
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Major
          Priority: High
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: joan@xxxxxxxxx



Joan Ramio <joan@xxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Attachment #3241|                            |review_for_checkin?
               Flag|                            |


Created an attachment (id=3241)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=3241)
Patch file

Build Information:
Version 1.2.0 (SVN Rev 25444)

Copyright 1998-2009 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GTK+ 2.12.9, with GLib 2.16.2, with libpcap 0.9.8, with libz
1.2.3, without POSIX capabilities, with libpcre 7.6, with SMI 0.4.5, without
c-ares, with ADNS, without Lua, without GnuTLS, without Gcrypt, without
Kerberos, without GeoIP, without PortAudio, without AirPcap.

Running on Linux 2.6.24.7-laptop-2mnb, with libpcap version 0.9.8.

Built using gcc 4.2.3 (4.2.3-6mnb1).

Wireshark is Open Source Software released under the GNU General Public
License.

Check the man page and http://www.wireshark.org for more information.
--
IEC 60870-5-104 dissector decodes nothing since version 27908. The cause is
that the dissector receives shorter lenghts since line 417 was changed from 
'guint8 Len = tvb_length(tvb);  /* Investigate also: 'reported Length' */'
to
'guint Len = tvb_reported_length(tvb);'

The original line is restored in last file version 28813.


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.