ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 12276] New: tshark crashes when trying to export to pdml

Date: Tue, 22 Mar 2016 14:03:39 +0000
Bug ID 12276
Summary tshark crashes when trying to export to pdml
Product Wireshark
Version 2.1.x (Experimental)
Hardware x86-64
OS Fedora
Status UNCONFIRMED
Severity Major
Priority Low
Component Build process
Assignee [email protected]
Reporter [email protected]

Build Information:
Running as user "root" and group "root". This could be dangerous.
TShark (Wireshark) 2.1.0-2370-g8def5c4 (Git Rev Unknown from unknown)

Copyright 1998-2016 Gerald Combs <[email protected]> and contributors.
License GPLv2+: GNU GPL version 2 or later
<http://www.gnu.org/licenses/old-licenses/gpl-2.0.html>
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with libpcap, without POSIX capabilities, without libnl, with
libz 1.2.7, with GLib 2.36.4, without SMI, with c-ares 1.10.0, without Lua,
with
GnuTLS 3.1.20, with Gcrypt 1.5.3, without Kerberos, without GeoIP.

Running on Linux 3.14.27-100.fc19.x86_64, with locale en_US.UTF-8, with libpcap
version 1.4.0, with libz 1.2.7, with GnuTLS 3.1.20, with Gcrypt 1.5.3.
Intel(R) Xeon(R) CPU           X3210  @ 2.13GHz

Built using gcc 4.8.3 20140911 (Red Hat 4.8.3-7).

--
Hi,

I compiled wireshark from sources on my linux box and When trying to to start
tshark with -T pdml, it crashes and produces the following error. Could you
please check it and let me know if there is a workaround for this? I would like
to highlight that when exporting to text or other, no error appears. 

Error:
Running as user "root" and group "root". This could be dangerous.
<?xml version="1.0"?>
<?xml-stylesheet type="text/xsl" href=""
<!-- You can find pdml2html.xsl in /usr/share/wireshark or at
https://code.wireshark.org/review/gitweb?p=wireshark.git;a=blob_plain;f=pdml2html.xsl.
-->
<pdml version="0" creator="wireshark/2.1.0-2370-g8def5c4" time="Tue Mar 22
16:01:52 2016" capture_file="">
Capturing on 'em1'
<packet>
  <proto name="geninfo" pos="0" showname="General information" size="60">
    <field name="num" pos="0" show="1" showname="Number" value="1" size="60"/>
    <field name="len" pos="0" show="60" showname="Frame Length" value="3c"
size="60"/>
    <field name="caplen" pos="0" show="60" showname="Captured Length"
value="3c" size="60"/>
    <field name="timestamp" pos="0" show="Mar 22, 2016 16:01:52.728950000 EET"
showname="Captured Time" value="1458655312.728950000" size="60"/>
  </proto>
  <proto name="frame" showname="Frame 1: 60 bytes on wire (480 bits), 60 bytes
captured (480 bits) on interface 0" size="60" pos="0">
    <field name="frame.interface_id" showname="Interface id: 0 (em1)" size="0"
pos="0" show="0"/>
    <field name="frame.encap_type" showname="Encapsulation type: Ethernet (1)"
size="0" pos="0" show="1"/>
    <field name="frame.time" showname="Arrival Time: Mar 22, 2016
16:01:52.728950000 EET" size="0" pos="0" show="Mar 22, 2016 16:01:52.728950000
EET"/>
    <field name="frame.offset_shift" showname="Time shift for this packet:
0.000000000 seconds" size="0" pos="0" show="0.000000000"/>
    <field name="frame.time_epoch" showname="Epoch Time: 1458655312.728950000
seconds" size="0" pos="0" show="1458655312.728950000"/>
    <field name="frame.time_delta" showname="Time delta from previous captured
frame: 0.000000000 seconds" size="0" pos="0" show="0.000000000"/>
    <field name="frame.time_delta_displayed" showname="Time delta from previous
displayed frame: 0.000000000 seconds" size="0" pos="0" show="0.000000000"/>
    <field name="frame.time_relative" showname="Time since reference or first
frame: 0.000000000 seconds" size="0" pos="0" show="0.000000000"/>
    <field name="frame.number" showname="Frame Number: 1" size="0" pos="0"
show="1"/>
    <field name="frame.len" showname="Frame Length: 60 bytes (480 bits)"
size="0" pos="0" show="60"/>
    <field name="frame.cap_len" showname="Capture Length: 60 bytes (480 bits)"
size="0" pos="0" show="60"/>
    <field name="frame.marked" showname="Frame is marked: False" size="0"
pos="0" show="0"/>
    <field name="frame.ignored" showname="Frame is ignored: False" size="0"
pos="0" show="0"/>
    <field name="frame.protocols" showname="Protocols in frame:
eth:ethertype:ip:tcp" size="0" pos="0" show="eth:ethertype:ip:tcp"/>
  </proto>
  <proto name="eth" showname="Ethernet II, Src: CiscoInc_79:64:40
(74:26:ac:79:64:40), Dst: Dell_fa:7c:b1 (00:1d:09:fa:7c:b1)" size="14" pos="0">
    <field name="eth.dst" showname="Destination: Dell_fa:7c:b1
(00:1d:09:fa:7c:b1)" size="6" pos="0" show="00:1d:09:fa:7c:b1"
value="001d09fa7cb1">
      <field name="eth.dst_resolved" showname="Destination (resolved):
Dell_fa:7c:b1" hide="yes" size="6" pos="0" show="Dell_fa:7c:b1"
value="001d09fa7cb1"/>
      <field name="eth.addr" showname="Address: Dell_fa:7c:b1
(00:1d:09:fa:7c:b1)" size="6" pos="0" show="00:1d:09:fa:7c:b1"
value="001d09fa7cb1"/>
      <field name="eth.addr_resolved" showname="Address (resolved):
Dell_fa:7c:b1" hide="yes" size="6" pos="0" show="Dell_fa:7c:b1"
value="001d09fa7cb1"/>
**
ERROR:ftypes.c:607:fvalue_get_sinteger64: assertion failed:
(fv->ftype->get_value_sinteger64)
      <field name="eth.lg" showname=".... ..0. .... .... .... .... = LG bit:
Globally unique address (factory default)" size="3" pos="0" show="0"
value="Aborted (core dumped)


Thank you in advance!

Br,
Sotiris


You are receiving this mail because:
  • You are watching all bug changes.