Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 5678] New: Fragmented ISO session layer packets are not re

Date: Fri, 11 Feb 2011 02:05:50 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5678

           Summary: Fragmented ISO session layer packets are not
                    reassembled
           Product: Wireshark
           Version: 1.5.x (Experimental)
          Platform: x86-64
        OS/Version: Windows XP
            Status: NEW
          Severity: Major
          Priority: Low
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: joachim.koetzing@xxxxxxxxxxxx


Created an attachment (id=5932)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=5932)
wireshark capture showing the error

Build Information:
Version 1.5.0 (SVN Rev 35637 from /trunk)

Copyright 1998-2011 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with GTK+ 2.16.6, with GLib 2.24.2, with WinPcap (version
unknown), with libz 1.2.3, without POSIX capabilities, without libpcre, without
SMI, with c-ares 1.7.1, with Lua 5.1, without Python, with GnuTLS 2.8.5, with
Gcrypt 1.4.5, without Kerberos, with GeoIP, with PortAudio V19-devel (built Jan
24 2011), with AirPcap.

Running on Windows XP Professional x64 Edition Service Pack 2, build 3790, with
WinPcap version 4.1.2 (packet.dll version 4.1.0.2001), based on libpcap version
1.0 branch 1_0_rel0b (20091008), GnuTLS 2.8.5, Gcrypt 1.4.5, without AirPcap.

Built using Microsoft Visual C++ 9.0 build 30729

--
When analyzing data transmitted over an X.400 P3 connection a session layer
protocol data unit (SPDU) may be split into more than one packet. This is not
realized by the SES (or the P3) dissector.
Erroneously the first packet is decoded as a truncated P22 InterPersonal
Message and the error [Packet size limited during capture] is displayed whereas
the second package is qualified as SPDU with an unknown SPDU type.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.