ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 7564] A packet is recognized as 8 bytes long while it is a

Date: Fri, 3 Aug 2012 15:04:58 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7564

Jakub Zawadzki <darkjames-ws@xxxxxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |darkjames-ws@xxxxxxxxxxxx
          Component|Wireshark                   |Capture file support
                   |                            |(libwiretap)

--- Comment #3 from Jakub Zawadzki <darkjames-ws@xxxxxxxxxxxx> 2012-08-03 15:04:57 PDT ---
Hi,

> The attached pcap file contains one packet which is 9 bytes long.
> However, Wireshark recognizes it as 8 bytes long.
> If I use WinPcap to read this packet, I get 9 bytes (the first byte is 0x00).

First byte is libpcap_ppp_phdr direction, and the problem is that libwiretap
don't treat pseudo headers as packet data.

Still, this information is used to display:
 [Direction DCE->DTE (1)]

Well, it's no longer '0' and '1' is just internal wireshark number
(P2P_DIR_RECV), which probably should be not displayed.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.