Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 10280] FR decodes header correctly, but processes octets after EA bit is set t

[bugzilla-daemon@xxxxxxxxxxxxx]

Jeff Morriss changed bug 10280

What	Removed	Added
Status	UNCONFIRMED	INCOMPLETE
CC		jeff.morriss.ws@gmail.com
Ever confirmed		1

Comment # 2 on bug 10280 from Jeff Morriss

The Frame Relay dissector knows that it's reached the end of the address but
it's trying to figure out what comes next.  (You can see this by looking at the
SITA-Protocols.cap file on the SampleCaptures page on the wiki.)  In your case
it's falling into this code:

~~~
      /*
       * If the data does not start with unnumbered information (03) and
       * the DLCI# is not 0, then there may be Cisco Frame Relay encapsulation.
       */
~~~

I suppose if the Cisco Type is unknown it should not try to display it as a
Cisco encapsulation and just show it as data.

Is there any encapsulation between the Frame Relay portion and the data
portion?

It would really help to have a sample capture in order to attempt a fix.

---

      You are receiving this mail because:

• You are watching all bug changes.