Ask Your Question
0

Wrong calculation of number of QUIC packets in Protocol Hierarchy window - bug in Wireshark

asked 2022-04-07 12:41:41 +0000

When you capture traffic and there is a QUIC (IETF) over UDP connection, you get strange results in Protocol Hierarchy Statistics window. Please see example printscreen. QUIC protocol was selected to be displayed and there is obviously 100% of Ethernet frames (13127 packets), however, in case of QUIC, Wireshark displays total of 13.346 packets (101.7%). It doesn't make sence, because QUIC is encapsulated in Ethernet / IP / UDP. Similar problem appears for QUIC over IPv4 or IPv6, or also when using "quic" display filter or not. Simply: Number of captured frames cannot be lower then number of QUIC packets, but Wireshark statistics claims it.

Example of printscreen with bug: https://sites.google.com/view/sample-...

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted
0

answered 2022-04-07 14:37:33 +0000

Chuckc gravatar image

Tracked on Gitlab as Issue 18034

edit flag offensive delete link more

Comments

I.e., if you find a problem in Wireshark that's clearly a bug, file an issue for it on GitLab.

Guy Harris gravatar imageGuy Harris ( 2022-04-07 17:47:52 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

Stats

Asked: 2022-04-07 12:41:41 +0000

Seen: 35 times

Last updated: Apr 07