Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 4186] packet-dcm, packet reassembly is not reliable

Date: Fri, 2 Apr 2010 11:51:23 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4186

David <david_aggeler@xxxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|packet-dcm, dissection not  |packet-dcm, packet
                   |reliable when DICOM packets |reassembly is not reliable
                   |are not within the first    |
                   |few captured packtes        |

--- Comment #1 from David <david_aggeler@xxxxxxxxxx> 2010-04-02 11:51:17 PDT ---
The problem is more general. This may occur at any point, but see so far

- When DICOM packets are not within the first few captured ones
- In 1.3, if one of the DCM packets is in packet #512
- When a C-STORE-RSP occurs in the middle of an open C-STORE

The DICOM dissector puts too much assumption into the packet order, as it is
being called by the framework.

The PDU reassembly is pretty reliable, but merging the 'More Fragments' PDUs
together is not done according Wireshark conventions.

As a result, exported DICOM objects can also be corrupt.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.