Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 12567] Wireshark requires strict format for SPI field of E

Date: Wed, 29 Jun 2016 19:07:30 +0000

changed bug 12567


What Removed Added
Status UNCONFIRMED CONFIRMED
Hardware x86 All
Ever confirmed   1

Comment # 1 on bug 12567 from
The underlying factor is that UAT entries (SPI and addresses) can contain a
wildcard ('*') as well. Therefore these need to be treated as strings. 

That being said, since the format is well known, code should be added to
process these entries into a common format, to be used when accessing the SA
database. In fact packet-esp.c already contains code to process IPv4 and IPv6
addresses, but this is not used. It should be, and processing code for SPI
should be added. Probably in the form of custom UAT entry callbacks. This also
applies to the esp_sa_record_add_from_dissector() interface.


You are receiving this mail because:
  • You are watching all bug changes.