Wireshark · Wireshark-users: Re: [Wireshark-users] Wireshark crash with WiMAX capture file

["Martin, Jack" <Jack.Martin@xxxxxxxxxxx>]

I have no idea (and don't know how I would find that I out).
The trace is running Wimax 1.0.0. but I have no idea what
version Wireshark is built for.  Regardless of that, I would
expect non compatible versions to load okay, I just wouldn't
expect to decode all messages.

I isolated the first frame from the capture file previously
attached and when WiMAX ASN CP is enabled I immediately crash.
So I isolated the 2nd frame from the capture and I immediately
crash.  It appears that if the file contains any WiMAX ASN 
frames, I crash.


-----Original Message-----
From: wireshark-users-bounces@xxxxxxxxxxxxx
[mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of Luis EG
Ontanon
Sent: Monday, February 11, 2008 10:27 AM
To: Community support list for Wireshark
Subject: Re: [Wireshark-users] Wireshark crash with WiMAX capture file

is the wimax plugin built for the same release you are trying to use it?


On Feb 11, 2008 4:22 PM, Martin, Jack <Jack.Martin@xxxxxxxxxxx> wrote:
>
>
>
>
> You are correct, I did not build Wireshark myself - I downloaded the
>
> official 0.99.7 version (several times just to make sure).
>
>
>
> I'll attach the capture file I use but others have used 0.99.7 to open
this
>
> same capture file without any issue.  I would not be surprised if you
can
>
> open the file successfully.  Note that I have tried 4 or 5 different
>
> capture files and each time I crash.  I do not capture the file(s)
>
> myself, I am only trying to open a file that was captured by another
>
> device.  Others can open this file and I can open other files that do
not
>
> contain WiMAX.
>
>
>
> I can not narrow it down to a frame since when I try and open the file
it
>
> crashes before any frames are displayed.  If I disable WiMAX ASN CP
>
> protocol I can open the file but as soon as I enable that protocol
>
> (for example after the file is open) it crashes.
>
>
>
>
>
> Thanks.
>
>  ________________________________
>
>
> From: wireshark-users-bounces@xxxxxxxxxxxxx
> [mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of Martin
Mathieson
>  Sent: Monday, February 11, 2008 10:13 AM
>
>
>  To: Community support list for Wireshark
>  Subject: Re: [Wireshark-users] Wireshark crash with WiMAX capture
file
>
>
>
>
>
> Most likely Wireshark is crashing because of a bug in the wimaxasncp
> dissector.
>
>  If you are able to send (attach to a bug) a capture file that causes
this
> problem, I can try to debug it.  You can always try to trim the
message down
> to one frame (disable, wimaxasncp, save the displayed frames, etc
until you
> narrow it down to the frame that causes the problem.
>
>  If you can't send in a capture file, you'll need to try to get the
stack at
> the point where it crashes (it looks like you're using the official
0.99.7
> release, so I'm guessing you didn't build Wireshark yourself).  You
could
> try using the most recent development build from
> http://www.wireshark.org/download/automated/win32/, although I don't
believe
> the wimaxasncp dissector has been changed since the release.
>
>
> On Feb 11, 2008 3:02 PM, Martin, Jack <Jack.Martin@xxxxxxxxxxx> wrote:
>
>
>
> Here's all I have ... (when I open any capture file that has WiMAX R6
messages
>
> I get the error and Wireshark closes - nothing is shown in the
wireshark
>
> window before it closes).
>
>
>
>
>
>
>
>  ________________________________
>
>
> From: wireshark-users-bounces@xxxxxxxxxxxxx
> [mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of Martin
Mathieson
>  Sent: Monday, February 11, 2008 9:56 AM
>  To: Community support list for Wireshark
>  Subject: Re: [Wireshark-users] Wireshark crash with WiMAX capture
file
>
>
>
>
>
> Hi,
>
>  Could you post a capture file showing the problem?
>
>  Best add whatever details you can to bugilla
(http://bugs.wireshark.org).
>
>  Martin
>
>
>
>
> On Feb 11, 2008 2:36 PM, Martin, Jack <Jack.Martin@xxxxxxxxxxx> wrote:
>
>
>
> I downloaded the latest version of Wirshark (0.99.7), but when I try
and
>
> open a capture file that has WiMAX messages (R6 messages) I get a
>
> windows error report and Wireshark closes.  If I disable the WiMAX ASN
CP
>
> protocol I am able to open the file but obviously can not decode the
>
> WiMAX messages.
>
>
>
> I can open (and decode) files with other protocols ( AAA, SIP, GTP,
etc ...),
>
> it appears as if WiMAX is the only thing I'm having trouble with.
>
>
>
> Any suggestions on how to fix my issue?
>
>
>
> Regards.
>
>
>
>
>
>
>  E-mail confidentiality.
>  --------------------------------
>  This e-mail contains confidential and / or privileged information
belonging
> to Spirent Communications plc, its affiliates and / or subsidiaries.
If you
> are not the intended recipient, you are hereby notified that any
disclosure,
> copying, distribution and / or the taking of any action based upon
reliance
> on the contents of this transmission is strictly forbidden. If you
have
> received this message in error please notify the sender by return
e-mail and
> delete it from your system. If you require assistance, please contact
our IT
> department at helpdesk@xxxxxxxxxxx.
>
>  Spirent Communications plc
>  Northwood Park, Gatwick Road, Crawley, West Sussex, RH10 9XN, United
> Kingdom.
>  Tel No. +44 (0) 1293 767676
>  Fax No. +44 (0) 1293 767677
>
>  Registered in England Number 470893
>  Registered at Northwood Park, Gatwick Road, Crawley, West Sussex,
RH10 9XN,
> United Kingdom.
>
>  Or if within the US,
>
>  Spirent Communications,
>  26750 Agoura Road, Calabasas, CA, 91302, USA.
>  Tel No. 1-818-676- 2300
>
>
>  _______________________________________________
>  Wireshark-users mailing list
>  Wireshark-users@xxxxxxxxxxxxx
>  http://www.wireshark.org/mailman/listinfo/wireshark-users
>
>
>
>
>
>
>
>
>
>
>  E-mail confidentiality.
>  --------------------------------
>  This e-mail contains confidential and / or privileged information
belonging
> to Spirent Communications plc, its affiliates and / or subsidiaries.
If you
> are not the intended recipient, you are hereby notified that any
disclosure,
> copying, distribution and / or the taking of any action based upon
reliance
> on the contents of this transmission is strictly forbidden. If you
have
> received this message in error please notify the sender by return
e-mail and
> delete it from your system. If you require assistance, please contact
our IT
> department at helpdesk@xxxxxxxxxxx.
>
>  Spirent Communications plc,
>  Northwood Park, Gatwick Road, Crawley, West Sussex, RH10 9XN, United
> Kingdom.
>  Tel No. +44 (0) 1293 767676
>  Fax No. +44 (0) 1293 767677
>
>  Registered in England Number 470893
>  Registered at Northwood Park, Gatwick Road, Crawley, West Sussex,
RH10 9XN,
> United Kingdom.
>
>  Or if within the US,
>
>  Spirent Communications,
>  26750 Agoura Road, Calabasas, CA, 91302, USA.
>  Tel No. 1-818-676- 2300
>
>
>  _______________________________________________
>  Wireshark-users mailing list
>  Wireshark-users@xxxxxxxxxxxxx
>  http://www.wireshark.org/mailman/listinfo/wireshark-users
>
>
>
>
>
>
> E-mail confidentiality.
> --------------------------------
> This e-mail contains confidential and / or privileged information
belonging
> to Spirent Communications plc, its affiliates and / or subsidiaries.
If you
> are not the intended recipient, you are hereby notified that any
disclosure,
> copying, distribution and / or the taking of any action based upon
reliance
> on the contents of this transmission is strictly forbidden. If you
have
> received this message in error please notify the sender by return
e-mail and
> delete it from your system. If you require assistance, please contact
our IT
> department at helpdesk@xxxxxxxxxxx.
>
> Spirent Communications plc,
> Northwood Park, Gatwick Road, Crawley, West Sussex, RH10 9XN, United
> Kingdom.
> Tel No. +44 (0) 1293 767676
> Fax No. +44 (0) 1293 767677
>
> Registered in England Number 470893
> Registered at Northwood Park, Gatwick Road, Crawley, West Sussex, RH10
9XN,
> United Kingdom.
>
> Or if within the US,
>
> Spirent Communications,
> 26750 Agoura Road, Calabasas, CA, 91302, USA.
> Tel No. 1-818-676- 2300
>
>
> _______________________________________________
> Wireshark-users mailing list
> Wireshark-users@xxxxxxxxxxxxx
> http://www.wireshark.org/mailman/listinfo/wireshark-users
>
>



-- 
This information is top security. When you have read it, destroy
yourself.
-- Marshall McLuhan
_______________________________________________
Wireshark-users mailing list
Wireshark-users@xxxxxxxxxxxxx
http://www.wireshark.org/mailman/listinfo/wireshark-users

<DIV><FONT size="1">

E-mail confidentiality.
--------------------------------
This e-mail contains confidential and / or privileged information belonging to Spirent Communications plc, its affiliates and / or subsidiaries. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution and / or the taking of any action based upon reliance on the contents of this transmission is strictly forbidden. If you have received this message in error please notify the sender by return e-mail and delete it from your system. If you require assistance, please contact our IT department at helpdesk@xxxxxxxxxxx.

Spirent Communications plc
Northwood Park, Gatwick Road, Crawley, West Sussex, RH10 9XN, United Kingdom.
Tel No. +44 (0) 1293 767676
Fax No. +44 (0) 1293 767677

Registered in England Number 470893
Registered at Northwood Park, Gatwick Road, Crawley, West Sussex, RH10 9XN, United Kingdom.

Or if within the US,

Spirent Communications,
26750 Agoura Road, Calabasas, CA, 91302, USA.
Tel No. 1-818-676- 2300 

</FONT></DIV>