ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 8027] New: Dev tshark hex bytes output messed up ??

Date: Sat, 01 Dec 2012 17:43:26 +0000
Bug ID 8027
Summary Dev tshark hex bytes output messed up ??
Classification Unclassified
Product Wireshark
Version SVN
Hardware x86
OS All
Status CONFIRMED
Severity Normal
Priority Low
Component TShark
Assignee [email protected]
Reporter [email protected]

Build Information:
Dev SVN
--
Current dev tshark has hex bytes output issues ?

See below.

Notes:
1. The (bad) hex bytes output is the same on repeated runs;
2. The output is different on my Windows and Linux systems.
   (On Linux, note the incorrect values starting on each line at
    the byte which is truncated on the Windows output)
3. pcapng or libpcat format input: same issue.

Anyone else seeing this ??

Character set issues ?

[Separately:
   The summary line is not present for the dev versions
   when using tshark -x w/o -V.
   Is this an intended functional change or also a bug ?
]

------------

Windows 1.8 (built from latest SVN 1.8)

$tshark -nxr szx.pcap
  1 0.000000000 192.168.208.101 -> 230.9.9.6    UDP 60 Source port: 1050 
Destination port: 30636

0000  01 00 5e 09 09 06 00 00 5a 99 f3 c8 08 00 45 00   ..^.....Z.....E.
0010  00 20 77 3b 00 00 80 11 43 74 c0 a8 d0 65 e6 09   . w;....Ct...e..
0020  09 06 04 1a 77 ac 00 0c 74 7e 4d 53 42 20 01 00   ....w...t~MSB ..
0030  42 20 42 20 42 20 42 20 42 20 42 20               B B B B B B

--------

Windows dev (built from Dev SVN)

$tshark -nxr szx.pcap
0000  01 00 5e 09 09 06 00 00 5a
0010  00 20 77 3b 00 00
0020  09 06 04 1a 77
0030  42 20 42 20 42 20 42 20 42 20 42 20               B B B B B B

-----------

Fedora dev (built from Dev SVN)

$ libtool  execute ./tshark -nxr szx.pcap
0000  01 00 5e 09 09 06 00 00 5a d9
0010  00 20 77 3b 00 00 l0 11 43 74 a0 _8 t0 65 a6 09   . w;....Ct...e..
0020  09 06 04 1a 77 _c 00 0c 74 7e 4d 53 42 20 01 00   ....w...t~MSB ..
0030  42 20 42 20 42 20 42 20 42 20 42 20               B B B B B B


---------
od -t x1 szx.pcap
<snip>
0000160 01 00 5e 09 09 06 00 00 5a 99 f3 c8 08 00 45 00
0000200 00 20 77 3b 00 00 80 11 43 74 c0 a8 d0 65 e6 09
0000220 09 06 04 1a 77 ac 00 0c 74 7e 4d 53 42 20 01 00
0000240 42 20 42 20 42 20 42 20 42 20 42 20 5c 00 00 00
0000260


You are receiving this mail because:
  • You are watching all bug changes.