Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 5350] Message info for FIX Execution Report not correct af

Date: Fri, 29 Oct 2010 09:27:59 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5350

--- Comment #7 from Bill Meier <wmeier@xxxxxxxxxxx> 2010-10-29 12:27:59 EDT ---
The FIX 4.2 Protocol Spec says:

(Page 9)

"Except where noted, fields within a message can be defined in any sequence
(Relative position of a field within a message is inconsequential.)
The exceptions to this rule are:
1. General message format is composed of the standard header followed by
   the body followed by the standard trailer.
2. The first three fields in the standard header are BeginString (tag #8)
   followed by BodyLength (tag #9) followed by MsgType (tag #35).
   ....

Page 23:

"8 BeginString Y FIX.4.2 (Always unencrypted, must be first field in message)
 9 BodyLength Y (Always unencrypted, must be second field in message)
 35 MsgType Y (Always unencrypted, must be third field in message)

------

The Wireshark Fix dissector assumes the above when determining the Message Type
to be put in the Info column of the summary pane. 

In your screen shots the 3rd field is the sequence number and thus this field
is the field used for determining the message type put in the Info column.

The BeginString in your messages says "FIX.4.2" and yet the message doesn't
seem to conform to the FIX 4.2 spec.

Any idea what's going on ??

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.