Package: tcpick Version: 0.2.1-6 Severity: wishlist While debugging a web application I noticed that tcpick was skipping some sessions. A closer look showed that it seems to be skipping sessions for users who use ipv6.
Steps to reproduce: 1) /usr/sbin/tcpick -wR -r testcase.pcap Expected results: 1) tcpick detects both ipv4 and ipv6 sessions. Actual results: 1) tcpick detects only the ipv4 session: Starting tcpick 0.2.1 at 2013-03-08 12:40 EET Timeout for connections is 600 tcpick: reading from testcase.pcap 1 SYN-SENT 127.0.0.1:39885 > 127.0.0.1:3000 1 SYN-RECEIVED 127.0.0.1:39885 > 127.0.0.1:3000 1 ESTABLISHED 127.0.0.1:39885 > 127.0.0.1:3000 1 FIN-WAIT-1 127.0.0.1:39885 > 127.0.0.1:3000 1 FIN-WAIT-2 127.0.0.1:39885 > 127.0.0.1:3000 1 TIME-WAIT 127.0.0.1:39885 > 127.0.0.1:3000 1 CLOSED 127.0.0.1:39885 > 127.0.0.1:3000 tcpick: done reading from testcase.pcap 18 packets captured 1 tcp sessions detected $ cat tcpick_127.0.0.1_127.0.0.1_3000.serv.dat ipv4 traffic More info: 1) tcpdump shows both: $ /usr/sbin/tcpdump -r testcase.pcap reading from file testcase.pcap, link-type EN10MB (Ethernet) 12:37:33.118240 IP localhost.39885 > localhost.3000: Flags [S], seq 3307815265, win 32792, options [mss 16396,sackOK,TS val 19983932 ecr 0,nop,wscale 10], length 0 12:37:33.118255 IP localhost.3000 > localhost.39885: Flags [S.], seq 1879553098, ack 3307815266, win 32768, options [mss 16396,sackOK,TS val 19983932 ecr 19983932,nop,wscale 10], length 0 12:37:33.118262 IP localhost.39885 > localhost.3000: Flags [.], ack 1, win 33, options [nop,nop,TS val 19983932 ecr 19983932], length 0 12:37:33.118494 IP localhost.39885 > localhost.3000: Flags [P.], seq 1:14, ack 1, win 33, options [nop,nop,TS val 19983932 ecr 19983932], length 13 12:37:33.118505 IP localhost.3000 > localhost.39885: Flags [.], ack 14, win 32, options [nop,nop,TS val 19983932 ecr 19983932], length 0 12:37:33.118603 IP localhost.39885 > localhost.3000: Flags [F.], seq 14, ack 1, win 33, options [nop,nop,TS val 19983932 ecr 19983932], length 0 12:37:33.157908 IP localhost.3000 > localhost.39885: Flags [.], ack 15, win 32, options [nop,nop,TS val 19983942 ecr 19983932], length 0 12:37:33.619232 IP localhost.3000 > localhost.39885: Flags [F.], seq 1, ack 15, win 32, options [nop,nop,TS val 19984057 ecr 19983932], length 0 12:37:33.619268 IP localhost.39885 > localhost.3000: Flags [.], ack 2, win 33, options [nop,nop,TS val 19984057 ecr 19984057], length 0 12:37:57.623466 IP6 ::1.36781 > ::1.3000: Flags [S], seq 1851150570, win 32752, options [mss 16376,sackOK,TS val 19990058 ecr 0,nop,wscale 10], length 0 12:37:57.623477 IP6 ::1.3000 > ::1.36781: Flags [S.], seq 3532182303, ack 1851150571, win 32728, options [mss 16376,sackOK,TS val 19990058 ecr 19990058,nop,wscale 10], length 0 12:37:57.623484 IP6 ::1.36781 > ::1.3000: Flags [.], ack 1, win 32, options [nop,nop,TS val 19990058 ecr 19990058], length 0 12:37:57.623596 IP6 ::1.36781 > ::1.3000: Flags [P.], seq 1:14, ack 1, win 32, options [nop,nop,TS val 19990058 ecr 19990058], length 13 12:37:57.623604 IP6 ::1.3000 > ::1.36781: Flags [.], ack 14, win 32, options [nop,nop,TS val 19990058 ecr 19990058], length 0 12:37:57.623615 IP6 ::1.36781 > ::1.3000: Flags [F.], seq 14, ack 1, win 32, options [nop,nop,TS val 19990058 ecr 19990058], length 0 12:37:57.661928 IP6 ::1.3000 > ::1.36781: Flags [.], ack 15, win 32, options [nop,nop,TS val 19990068 ecr 19990058], length 0 12:37:58.124283 IP6 ::1.3000 > ::1.36781: Flags [F.], seq 1, ack 15, win 32, options [nop,nop,TS val 19990183 ecr 19990058], length 0 12:37:58.124303 IP6 ::1.36781 > ::1.3000: Flags [.], ack 2, win 32, options [nop,nop,TS val 19990183 ecr 19990183], length 0
testcase.pcap
Description: application/cap
-- System Information: Debian Release: 7.0 APT prefers unstable APT policy: (500, 'unstable'), (1, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 3.2.0-0.bpo.4-amd64 (SMP w/6 CPU cores) Locale: LANG=C, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Versions of packages tcpick depends on: ii libc6 2.13-38 ii libpcap0.8 1.3.0-1 tcpick recommends no packages. tcpick suggests no packages. -- no debconf information
