https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5351
Summary: RTMPT improvements
Product: Wireshark
Version: SVN
Platform: Other
OS/Version: All
Status: NEW
Severity: Enhancement
Priority: Low
Component: Wireshark
AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
ReportedBy: jsethdev@xxxxxxxxxxxxxxxxxxxx
Build Information:
Paste the COMPLETE build information from "Help->About Wireshark", "wireshark
-v", or "tshark -v".
--
Improve RTMP dissection:
* Handle multi-byte csids
* Handle extended timestamps
* Better timestamp defaulting/calculations
* Dechunking should now cope with any clean high quality capture without
error (still loses sync on missing/out of order packets, but that's very hard
to deal with)
* Dissect tunnelled RTMPT
* Dissect more packet types
* Dissect more AMF0 data types
* Dissect audio/video control information
* Use official packet/type names
* Several new fields
* Function call/response frame linking
* Push several useful bits of data up the dissection tree or into the info
column for ease of use
Not (yet?) implemented:
* AMF3 decoding (I've never seen this actually used: even the AMF command
packets contain wrapped AMF0 blobs, possibly needs specific ActionScript to
provoke)
* Proper handling of Abort packets (never seen, though probably possible with
relayed RTMP connections that get dropped mid-packet)
* Auto-recovery of synchronisation after packet loss (very hard!)
This version has had 50 hours of continuous fuzzing.
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
