Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 9931] Encapsulated ethernet packets sometimes show invalid

Date: Thu, 27 Mar 2014 23:24:44 +0000

Comment # 5 on bug 9931 from
(In reply to comment #4)
> What about the third part - fixing libwiretap routines to fill in the
> wtap_pkthdr structure?
> 
> Or are they doing so, with the real problem being that the "eth" dissector
> was assuming that the packets were Ethernet packets in the capture file, so
> that the Ethernet pseudo-header was filled in, when, in fact, it was the
> *ATM* pseudo-header that was filled in?

I was wrong - it's the latter case. There is code that wasn't initializing the
struct (and thus not initializing the pseudo_header union) but that's fixed by
this bug.  Lua-based file readers don't have a way to set the pseudo_header
values right now, but it is initialized to 0 at least.


You are receiving this mail because:
  • You are watching all bug changes.