Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 4485] UDP checksum validation does not function

Date: Sat, 13 Feb 2010 11:21:20 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4485

--- Comment #4 from cinthia721@xxxxxxxxx 2010-02-13 11:21:19 PST ---
(In reply to comment #3)

> > To add to the mix, I just recently upgraded from 0.99 to 1.2.5.  I believe it used to validate udp checksum when displaying.
> 
> It does, didn't I show you that?

In 0.99, I did not have to use -o.  UDP checksum validation was enabled by
default.

Version 0.99
> tshark -r file.cap -R "frame.number == 3" -V
User Datagram Protocol, Src Port: 50036 (50036), Dst Port: 5060 (5060)
    Source port: 50036 (50036)
    Destination port: 5060 (5060)
    Length: 1155
    Checksum: 0xdedf [correct]

Version 1.2.5
> tshark -r file.cap -R "frame.number == 3" -V
User Datagram Protocol, Src Port: sip (5060), Dst Port: sip (5060)
    Source port: sip (5060)
    Destination port: sip (5060)
    Length: 788
    Checksum: 0x88d6 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]



> Tshark uses the Wireshark preferences file, which contains such entry.
I assume you mean "udp.check_checksum:true", and not
"udp.check_checksum:false", is there.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.