Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 8970] New: Error in IPv6 address decompression from 6LoWPA

Date: Tue, 23 Jul 2013 17:13:01 +0000
Bug ID 8970
Summary Error in IPv6 address decompression from 6LoWPAN packets
Classification Unclassified
Product Wireshark
Version 1.11.x (Experimental)
Hardware x86
OS Ubuntu
Status UNCONFIRMED
Severity Minor
Priority Low
Component Dissection engine (libwireshark)
Assignee [email protected]
Reporter [email protected]

Created attachment 11269 [details]
capture file

Build Information:
Version 1.11.0 (SVN Rev 50554 from /trunk)

Copyright 1998-2013 Gerald Combs <[email protected]> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (32-bit) with GTK+ 2.24.17, with Cairo 1.12.14, with Pango 1.32.5,
with
GLib 2.36.0, with libpcap, with libz 1.2.7, without POSIX capabilities, without
libnl, without SMI, without c-ares, without ADNS, without Lua, without Python,
without GnuTLS, without Gcrypt, without Kerberos, without GeoIP, without
PortAudio, with AirPcap.

Running on Linux 3.8.0-26-generic, with locale en_US.UTF-8, with libpcap
version
1.3.0, with libz 1.2.7, without AirPcap.

Built using gcc 4.7.3.
--
Hello,

After some careful reading, I think there's a bug in Wireshark's IPv6 address
decompression from 6LoWPAN packets. The 6LoWPAN header of the packets is IPHC.

http://i39.tinypic.com/2hdpbmg.png

Where it shows fe80::ff:fe00:2, it should instead show fe80::22:ff:fe00:2,
because 0x22 is the PAN ID (by default).

http://i42.tinypic.com/mkhpvp.png

References:
* https://tools.ietf.org/html/rfc4944#page-13
*
http://tinyos.stanford.edu/tinyos-wiki/index.php/BLIP_2.0_Tutorial#Static_Address_Mode


You are receiving this mail because:
  • You are watching all bug changes.