Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 12568] Wireshark is marking BGP FlowSpec NLRI as malformed

Date: Thu, 30 Jun 2016 08:03:39 +0000

Comment # 22 on bug 12568 from
(In reply to Dario Lombardo from comment #20)
> With the current patch, I still have a malformed error, as before. The patch
> is good as per specs, but somewhere the dissector is still buggy (provided
> that the capture is error free).

Hello,

the large flowspec packet is now parsed correctly with Version
2.0.5rc0-45-g0fcd23c (v2.0.5rc0-45-g0fcd23c from master-2.0). However, I also
see the malformed error after the correctly parsed large flowspec filter. What
is strange to me is that the error does not point to a certain error in the HEX
dump of the packet.

I have also uploaded a new pcap. I basically exported the good update message
from the initial pcap.

I was also talking to Christoph before. He can run some additional tests today
and capture packets with the new version. He will write you later on.


You are receiving this mail because:
  • You are watching all bug changes.