This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Latest Wireshark can’t parse VJ compressed frame

0

For the same packet within the same PCAP file, By using different version of Wireshark tool, I can see different log view. Issue is not seen on Wireshark Version 1.10.0 but seen on recent version such as latest 2.0.1

Example:

// Wireshark Version 2.0.1

20 24.0 DTE DCE 0x002d 12 PPP Van Jacobson Compressed TCP/IP (0x002d)

// Wireshark Version 1.10.0, this is good

20 2016-02-17 10:01:18.6 14.31.22.16 121.15.143.92 12 TCP 35075 > hbci [PSH, ACK] Seq=1 Ack=1 Win=16384 [TCP CHECKSUM INCORRECT] Len=7

Can you please let me know if there is any settings relate to this.

I checked Edit -> Preference -> Protocols -> PPP, <decompressed vj-compressed="" frames=""> is already checked

asked 17 Feb '16, 21:46

stephennnuaa's gravatar image

stephennnuaa
6113
accept rate: 0%

edited 17 Feb '16, 21:47


2 Answers:

0

Please file a bug on the Wireshark Bugzilla and attach the capture to the file.

answered 18 Feb '16, 00:24

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196
accept rate: 19%

Thanks Harris, I will file the bug report shortly

(18 Feb '16, 01:26) stephennnuaa

0

The code to handle Van Jacobson compression was removed from Wireshark, starting with the 1.12 release, due to concerns about its license. See bug 12138.

answered 18 Feb '16, 05:23

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196
accept rate: 19%