ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 10129] New: Hangs when saving ESP SA

Date: Fri, 23 May 2014 09:16:49 +0000
Bug ID 10129
Summary Hangs when saving ESP SA
Classification Unclassified
Product Wireshark
Version 1.11.x (Experimental)
Hardware x86
OS Mac OS X 10.4
Status UNCONFIRMED
Severity Normal
Priority Low
Component Wireshark
Assignee [email protected]
Reporter [email protected]

Build Information:
PasteBoard: Error creating pasteboard: com.apple.pasteboard.clipboard [-4960]
PasteBoard: Error creating pasteboard: com.apple.pasteboard.find [-4960]
QMetaObject::connectSlotsByName: No matching signal for on_bStart_clicked()
QMetaObject::connectSlotsByName: No matching signal for on_bStop_clicked()
FIX: packet list heading menu sensitivity 
wireshark 1.11.3 (v1.11.3-0-g1dd5d3a from master)

Copyright 1998-2014 Gerald Combs <[email protected]> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with Qt 5.2.1 with GLib 2.36.0, with libpcap, with libz
1.2.3,
without POSIX capabilities, with SMI 0.4.8, without c-ares, without ADNS, with
Lua 5.1, without Python, with GnuTLS 2.12.19, with Gcrypt 1.5.0, with MIT
Kerberos, with GeoIP, without PortAudio, with AirPcap.

Running on Mac OS X 10.9.3, build 13D65 (Darwin 13.2.0), without locale, with
libpcap version 1.3.0 - Apple version 41, with libz 1.2.5, GnuTLS 2.12.19,
Gcrypt 1.5.0, without AirPcap.
Intel(R) Core(TM) i7 CPU       M 620  @ 2.67GHz

Built using llvm-gcc 4.2.1 (Based on Apple Inc. build 5658) (LLVM build
2336.9.00).
--
I'm analyzing packets encrypted with ESP (IPsec).

When I add the ESP SA:s under the ESP preferences and finish up by pressing
'OK', the window hangs.

Activity monitor shows Wireshark taking 100% CPU, I need to force quit the
process.

When I start wireshark the next time the ESP SAs are still there and are
decrypting the packages correctly.

The only checked option are:

'Attempt to detect/decode encrypted ESP payloads'

The AS:es are IPV4 encrypted using AES-CBC[RFC3602] and auhtenticated using
HMAC-SHA-1-06[RFC2404].

This happens every time I add SA:s and click 'OK'.


You are receiving this mail because:
  • You are watching all bug changes.