Wireshark-bugs: [Wireshark-bugs] [Bug 5863] DTLS and RELOAD enhancements and bug fixes
Date: Wed, 1 Jun 2011 08:17:56 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5863

Chris Maynard <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Attachment #6419|review_for_checkin?         |
               Flag|                            |
   Attachment #6419|0                           |1
        is obsolete|                            |
   Attachment #6438|                            |review_for_checkin?
               Flag|                            |

--- Comment #12 from Chris Maynard <[email protected]> 2011-06-01 08:17:52 PDT ---
Created an attachment (id=6438)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=6438)
An improved patch based on Michael's.

This patch attempts to improve upon Michael's patch by handling cases of
truncated packets.

I took the original capture file and created new capture files using editcap
with various snapshot lengths.  Below is a comparison of Michael's patch to
mine for the number of packets matching a dtls display filter given a
particular snapshot length:
            DTLS Matches
Snapshot  Michael's   Mine
<none>    30          30
1000      28          30
800       16          30
750       15          30
200       14          30
84        13          30
83        0           30
45        0           30
44        0           0*

*NOTE: With only 44 bytes captured, there were not even enough bytes left in
the payload to be able to call looks_like_dtls().

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.