Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 12763] New: tshark print 'TCP flags' with non-ascci chars

Date: Fri, 19 Aug 2016 12:46:12 +0000
Bug ID 12763
Summary tshark print 'TCP flags' with non-ascci chars on some console
Product Wireshark
Version Git
Hardware x86
OS Debian
Status UNCONFIRMED
Severity Normal
Priority Low
Component Dissection engine (libwireshark)
Assignee [email protected]
Reporter [email protected]

Created attachment 14826 [details]
pcap file with a TCP packet

Build Information:
$ ./tshark -v
TShark (Wireshark) 2.1.0 (v2.1.0rc0-2148-g845654d from unknown)

Copyright 1998-2016 Gerald Combs <[email protected]> and contributors.
License GPLv2+: GNU GPL version 2 or later
<http://www.gnu.org/licenses/old-licenses/gpl-2.0.html>
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with libpcap, without POSIX capabilities, without libnl, with
libz 1.2.8, with GLib 2.42.1, with SMI 0.4.8, without c-ares, without ADNS,
with
Lua 5.2, without GnuTLS, without Gcrypt, without Kerberos, with GeoIP.

Running on Linux 3.16.0-4-amd64, with locale C, with libpcap version 1.6.2,
with
libz 1.2.8.
       Intel(R) Core(TM) i5-2520M CPU @ 2.50GHz (with SSE4.2)

Built using gcc 4.9.2.

--
Some console don't print these non-ascii like UTF8_MIDDLE_DOT.

$ tty
/dev/pts/2

$ ./tshark -V -r pkt-1.pcap
[...]
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
        [TCP Flags: ·······AP···]
    Window size value: 64240
[...]

Filtered by less:
[TCP Flags:
<C2><B7><C2><B7><C2><B7><C2><B7><C2><B7><C2><B7><C2><B7>AP<C2><B7><C2><B7><C2><B7>]

This come at commit 845654d8b7d17831976eb9fc6f2f7140a8e2d84e.

It seems related with 'RESOLVED' Bug 12393.

Why non just a '.' ?

Did I miss something ?


You are receiving this mail because:
  • You are watching all bug changes.