>Number:         14589
>Category:       bin
>Synopsis:       tcpdump reports negative length on various capture fields
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    bin-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Wed Nov 14 23:22:00 PST 2001
>Closed-Date:
>Last-Modified:
>Originator:     Jun-ichiro itojun Hagino
>Release:        1.5Y and latest current
>Organization:
	itojun.org
>Environment:
System: NetBSD starfruit.itojun.org 1.5Y NetBSD 1.5Y (STARFRUIT) #3: Tue Nov 6 17:27:18 JST 2001 itojun@starfruit.itojun.org:/usr/home/itojun/NetBSD/src/sys/arch/i386/compile/STARFRUIT i386
Architecture: i386
Machine: i386
>Description:
	in-tree tcpdump (dist/tcpdump, usr.sbin/tcpdump) seems buggy and
	reports negative length in various fields.  if i run the latest
	tcpdump code from tcpdump.org, the problem does not appear.

16:16:41.829553 202.232.2.100 > 202.232.15.99: 2001:240:ff:1:290:27ff:fea0:3cd6.22 > 2001:240:0:200:208:c7ff:fea4:9c96.61872: P 1479933:1372129(-107804) ack 3912 win 17136 <nop,nop,[|tcp]> [flowlabel 0x6102e]

>How-To-Repeat:
>Fix:
	not sure.  time to upgrade tcpdump in our tree?
>Release-Note:
>Audit-Trail:
>Unformatted: