Ask Your Question

Revision history [back]

Wrong calculation of number of QUIC packets in Protocol Hierarchy window - bug in Wireshark

When you capture traffic and there is a QUIC (IETF) over UDP connection, you get strange results in Protocol Hierarchy Statistics window. Please see example printscreen. QUIC protocol was selected to be displayed and there is obviously 100% of Ethernet frames (13127 packets), however, in case of QUIC, Wireshark displays total of 13.346 packets (101.7%). It doesn't make sence, because QUIC is encapsulated in Ethernet / IP / UDP. Similar problem appears for QUIC over IPv4 or IPv6, or also when using "quic" display filter or not. Simply: Number of captured frames cannot be lower then number of QUIC packets, but Wireshark statistics claims it.

Example of printscreen with bug: https://sites.google.com/view/sample-output-of-wireshark-bug/domovsk%C3%A1-str%C3%A1nka