[prev in list] [next in list] [prev in thread] [next in thread] 

List:       wireshark-bugs
Subject:    [Wireshark-bugs] [Bug 16591] New: Expert analysis intermittently missing "ESP wrong sequence number"
From:       bugzilla-daemon () wireshark ! org
Date:       2020-05-29 9:40:58
Message-ID: 010001725fce596d-27f6de33-4401-4c4b-bc65-f7c55743fd90-000000 () email ! amazonses ! com
[Download RAW message or body]

--15907452580.46BA4b.7248
Date: Fri, 29 May 2020 09:40:58 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugs.wireshark.org/bugzilla/
Auto-Submitted: auto-generated

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16591

            Bug ID: 16591
           Summary: Expert analysis intermittently missing "ESP wrong
                    sequence number" in group summary
           Product: Wireshark
           Version: 3.2.4
          Hardware: x86-64
                OS: Windows 10
            Status: UNCONFIRMED
          Severity: Major
          Priority: Low
         Component: Common utilities (libwsutil)
          Assignee: bugzilla-admin@wireshark.org
          Reporter: a11en1ee@pacbell.net
  Target Milestone: ---

Created attachment 17771
  --> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=17771&action=edit
screenshots of check/unchecked group by summary and display filter count

Build Information:
3.2.4 (v3.2.4-0-g893b5a5e1e3e)

Compiled (64-bit) with Qt 5.12.8, with WinPcap SDK (WpdPack) 4.1.2, with GLib
2.52.3, with zlib 1.2.11, with SMI 0.4.8, with c-ares 1.15.0, with Lua 5.2.4,
with GnuTLS 3.6.3 and PKCS #11 support, with Gcrypt 1.8.3, with MIT Kerberos,
with MaxMind DB resolver, with nghttp2 1.39.2, with brotli, with LZ4, with
Zstandard, with Snappy, with libxml2 2.9.9, with QtMultimedia, with automatic
updates using WinSparkle 0.5.7, with AirPcap, with SpeexDSP (using bundled
resampler), with SBC, with SpanDSP, with bcg729.

Running on 64-bit Windows 10 (1809), build 17763, with Intel(R) Core(TM)
i7-6820HQ CPU @ 2.70GHz (with SSE4.2), with 16263 MB of physical memory, with
locale English_United States.1252, with light display mode, without HiDPI, with
Npcap version 0.9991, based on libpcap version 1.9.1, with GnuTLS 3.6.3, with
Gcrypt 1.8.3, with brotli 1.0.2, with AirPcap 4.1.3 build 3348, binary plugins
supported (19 loaded).

Built using Microsoft Visual Studio 2019 (VC++ 14.25, build 28614).

--
Expert analysis when the "group by summary" box is checked, is intermittently
not displaying any missing "ESP wrong sequence number" or the incorrect count.
I duplicated the issue in the development, 3.0, 2.9, and 2.6 versions.

The workaround is to uncheck the "group by summary".

I have attached screenshots with the "group by summary" box checked, and
unchecked. The unchecked count was verified with the display filter
"esp.sequence-analysis.wrong-sequence-number" (screenshot attached)

-- 
You are receiving this mail because:
You are watching all bug changes.
--15907452580.46BA4b.7248
Date: Fri, 29 May 2020 09:40:58 +0000
MIME-Version: 1.0
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugs.wireshark.org/bugzilla/
Auto-Submitted: auto-generated

<html>
    <head>
      <base href="https://bugs.wireshark.org/bugzilla/" />
      <style>
        body, th, td {
            font-size: 12px;
            font-family: Arial, Helvetica, sans-serif; }
        p, pre { margin-top: 1em; }
        pre {
            font-family: Bitstream Vera Sans Mono, Consolas, Lucida Console, \
monospace;  white-space: pre-wrap;
	}
        table { border: 0; border-spacing: 0; border-collapse: collapse; }
        th, td {
            padding: 0.25em;
            padding-left: 0.5em;
            padding-right: 0.5em;
        }
        th { background: rgb(240, 240, 240); }
        th.th_top { border-bottom: 1px solid rgb(116, 126, 147); }
        th.th_left { border-right: 1px solid rgb(116, 126, 147); }
        td.removed { background-color: #ffcccc; }
        td.added { background-color: #e4ffc7; }
      </style>
    </head>
    <body><table>
        <tr>
          <th class="th_left">Bug ID</th>
          <td><a class="bz_bug_link 
          bz_status_UNCONFIRMED "
   title="UNCONFIRMED - Expert analysis intermittently missing &quot;ESP wrong \
sequence number&quot; in group summary"  \
href="https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16591">16591</a>  </td>
        </tr>

        <tr>
          <th class="th_left">Summary</th>
          <td>Expert analysis intermittently missing &quot;ESP wrong sequence \
number&quot; in group summary  </td>
        </tr>

        <tr>
          <th class="th_left">Product</th>
          <td>Wireshark
          </td>
        </tr>

        <tr>
          <th class="th_left">Version</th>
          <td>3.2.4
          </td>
        </tr>

        <tr>
          <th class="th_left">Hardware</th>
          <td>x86-64
          </td>
        </tr>

        <tr>
          <th class="th_left">OS</th>
          <td>Windows 10
          </td>
        </tr>

        <tr>
          <th class="th_left">Status</th>
          <td>UNCONFIRMED
          </td>
        </tr>

        <tr>
          <th class="th_left">Severity</th>
          <td>Major
          </td>
        </tr>

        <tr>
          <th class="th_left">Priority</th>
          <td>Low
          </td>
        </tr>

        <tr>
          <th class="th_left">Component</th>
          <td>Common utilities (libwsutil)
          </td>
        </tr>

        <tr>
          <th class="th_left">Assignee</th>
          <td>bugzilla-admin&#64;wireshark.org
          </td>
        </tr>

        <tr>
          <th class="th_left">Reporter</th>
          <td>a11en1ee&#64;pacbell.net
          </td>
        </tr>

        <tr>
          <th class="th_left">Target Milestone</th>
          <td>---
          </td>
        </tr></table>
      <p>
        <div>
        <pre>Created <span class=""><a href="attachment.cgi?id=17771" \
name="attach_17771" title="screenshots of check/unchecked group by summary and \
display filter count">attachment 17771</a> <a \
href="attachment.cgi?id=17771&amp;action=edit" title="screenshots of check/unchecked \
group by summary and display filter count">[details]</a></span> screenshots of \
check/unchecked group by summary and display filter count

Build Information:
3.2.4 (<a href="https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=893b5a5e1e3e">v3.2.4-0-g893b5a5e1e3e</a>)


Compiled (64-bit) with Qt 5.12.8, with WinPcap SDK (WpdPack) 4.1.2, with GLib
2.52.3, with zlib 1.2.11, with SMI 0.4.8, with c-ares 1.15.0, with Lua 5.2.4,
with GnuTLS 3.6.3 and PKCS #11 support, with Gcrypt 1.8.3, with MIT Kerberos,
with MaxMind DB resolver, with nghttp2 1.39.2, with brotli, with LZ4, with
Zstandard, with Snappy, with libxml2 2.9.9, with QtMultimedia, with automatic
updates using WinSparkle 0.5.7, with AirPcap, with SpeexDSP (using bundled
resampler), with SBC, with SpanDSP, with bcg729.

Running on 64-bit Windows 10 (1809), build 17763, with Intel(R) Core(TM)
i7-6820HQ CPU &#64; 2.70GHz (with SSE4.2), with 16263 MB of physical memory, with
locale English_United States.1252, with light display mode, without HiDPI, with
Npcap version 0.9991, based on libpcap version 1.9.1, with GnuTLS 3.6.3, with
Gcrypt 1.8.3, with brotli 1.0.2, with AirPcap 4.1.3 build 3348, binary plugins
supported (19 loaded).

Built using Microsoft Visual Studio 2019 (VC++ 14.25, build 28614).

--
Expert analysis when the &quot;group by summary&quot; box is checked, is \
intermittently not displaying any missing &quot;ESP wrong sequence number&quot; or \
the incorrect count. I duplicated the issue in the development, 3.0, 2.9, and 2.6 \
versions.

The workaround is to uncheck the &quot;group by summary&quot;.

I have attached screenshots with the &quot;group by summary&quot; box checked, and
unchecked. The unchecked count was verified with the display filter
&quot;esp.sequence-analysis.wrong-sequence-number&quot; (screenshot attached)</pre>
        </div>
      </p>


      <hr>
      <span>You are receiving this mail because:</span>

      <ul>
          <li>You are watching all bug changes.</li>
      </ul>
    </body>
</html>
--15907452580.46BA4b.7248--


[Attachment #3 (text/plain)]

___________________________________________________________________________
Sent via:    Wireshark-bugs mailing list <wireshark-bugs@wireshark.org>
Archives:    https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
             mailto:wireshark-bugs-request@wireshark.org?subject=unsubscribe

[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic