Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 6938] New: RFC3261 CSeq number is allowed to exceed 2**31-

Date: Sun, 11 Mar 2012 21:53:32 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6938

           Summary: RFC3261 CSeq number is allowed to exceed 2**31-1
           Product: Wireshark
           Version: 1.7.x (Experimental)
          Platform: x86
        OS/Version: Windows Vista
            Status: NEW
          Severity: Enhancement
          Priority: Low
         Component: Wireshark
        AssignedTo: bugzilla-admin@xxxxxxxxxxxxx
        ReportedBy: sivad.a@xxxxxxxxxxxxxxx


Build Information:
astrid-test:/usr/src/wireshark# ./tshark -v
TShark 1.7.1 (SVN Rev 40784 from /trunk)

Copyright 1998-2012 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (32-bit) with GLib 2.24.2, with libpcap, with libz 1.2.3.4, without
POSIX capabilities, without SMI, without c-ares, without ADNS, without Lua,
without Python, with GnuTLS 2.8.6, with Gcrypt 1.4.5, with MIT Kerberos,
without
GeoIP.

Running on Linux 2.6.32-5-686, with locale en_NZ.UTF-8, with libpcap version
1.1.1, with libz 1.2.3.4.

Built using gcc 4.4.5.
astrid-test:/usr/src/wireshark#

--
Refer to http://www.rfc-editor.org/errata_search.php?rfc=3261 errata 3098 and
3102

The decoded output of the CSeq number limits number to 2**31-1 (2147483647)
when infact it can increase up to 2**32-1 (4294967295).


sample output below
        ....
        Call-ID: [email protected]
        CSeq: 2147497936 NOTIFY
            Sequence Number: 2147483647   <<<<<<<< this is wrong >>>>>
            Method: NOTIFY
        User-Agent: Asterisk PBX SVN-trunk-r353466M
        Subscription-State: active
        Event: dialog
        Content-Type: application/dialog-info+xml
        Content-Length: 209
    Message Body
        <?xml version="1.0"?>\n
        <dialog-info xmlns="urn:ietf:params:xml:ns:dialog-info" version="14290"
state="full" entity="sip:[email protected]">\n
        <dialog id="8612">\n
        <state>terminated</state>\n
        </dialog>\n
        </dialog-info>\n
        ....

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.