Wireshark-dev: [Wireshark-dev] tshark: Read filter -R and IPv6 checksum vaildation fails on mip
From: Sasikanth babu <[email protected]>
Date: Mon, 7 Oct 2013 01:30:37 +0530
Hello all,

 I have been facing two issues with tshark on mips64
1. Read filter fails ( i debugged it to some extent and found the
argument values passed to apply_test were wrong. I'm
                            not an expert  of yacc so could not able
to debug it).
2. IPv6 ICMP checksum always throws as incorrect. on X86 the same
packet shows as vaild checksum

Linux: 2.6.34 mips64
Wireshark: 1.6.10, 1.6.16 and 1.8.10 ( tried three versions including latest)

configure options
=============
./configure  --host=mips64-target-linux-gnu
--build=x86_64-crosscompile-linux-gnu --disable-wireshark
--with-lua=no --with-pcre=no

tshark reports IPv6 checksum as invaild
==============================
Internet Control Message Protocol v6
    Type: Router Solicitation (133)
    Code: 0
    Checksum: 0x5238 [incorrect, should be 0x9bee]
        [Expert Info (Warn/Checksum): ICMPv6 Checksum Incorrect,
should be 0x9bee]
            [Message: ICMPv6 Checksum Incorrect, should be 0x9bee]
            [Severity level: Warn]
            [Group: Checksum]

Read filter fails
===========
[email protected]:/root/> tshark -r testRadAcct12_vmac.0004_1.enc -R
"radius.Acct_Status_Type==1"
   Running as user "root" and group "root". This could be dangerous.

But grep works fine

[email protected]:/root/> tshark -r testRadAcct12_vmac.0004_1.enc -T fields
-e    radius.Acct_Status_Type
   Running as user "root" and group "root". This could be dangerous.
   1

Thanks
Sasi