ICMP ports display
Summary
I noticed that wireshark includes source and destination ports for some ICMP packets which is weird for ICMP to contain ports. Digging deeper with a custom decoder/parser that I built, I understand where this is coming from but this is not correct. Sharing my parsed message: {"PatternID": "ICMP100", "TIMESTAMP": "2024-01-08T23:01:21.010651", "SMAC": "xx", "DMAC": "xx", "ETHERNET_TYPE": "ethertype IPv4 (0x0800)", "FRAME_LENGTH": "70", "TTL": "64", "FLAGS": "none", "PROTOCOL": "ICMP", "IPv4_LENGTH": "56", "SIP": "192.168.8.108", "DIP": "192.168.8.1", "ICM_DETAILS": "ICMP 192.168.8.108 udp port 15939 unreachable, length 36, (tos 0x0, ttl 64, id 13346, offset 0, flags [DF], proto UDP (17), length 123), 192.168.8.1.53 > 192.168.8.108.15939: [no cksum] [|domain]"}
#Note: Wireshark has 53 and 15939 under srcport and dstport columns respectively
Steps to reproduce
Must share a pcap sample from my end
What is the current bug behavior?
Explained in summary
What is the expected correct behavior?
Need your insight on it
Sample capture file
If needed will try and share
Relevant logs and/or screenshots
(Paste any relevant logs)
Build information
Version 4.2.3 (v4.2.3-0-ga15d7331476c).
Compiled (64-bit) using Clang 14.0.3 (clang-1403.0.22.14.1), with GLib 2.76.6,
with Qt 6.2.4, with libpcap, without POSIX capabilities, with zlib 1.2.11, with
PCRE2, with Lua 5.2.4, with GnuTLS 3.8.3 and PKCS #11 support, with Gcrypt
1.10.2, with Kerberos (MIT), with MaxMind, with nghttp2 1.56.0, with nghttp3
0.15.0, with brotli, with LZ4, with Zstandard, with Snappy, with libxml2 2.11.5,
with libsmi 0.4.8, with QtMultimedia, with automatic updates using Sparkle, with
Minizip, with binary plugins.
Running on macOS 12.7, build 21G816 (Darwin 21.6.0), with Intel(R) Core(TM)
i7-5650U CPU @ 2.20GHz (with SSE4.2), with 8192 MB of physical memory, with GLib
2.76.6, with Qt 6.2.4, with libpcap 1.9.1, with zlib 1.2.11, with PCRE2 10.39
2021-10-29, with c-ares 1.19.1, with GnuTLS 3.8.3, with Gcrypt 1.10.2, with
nghttp2 1.56.0, with nghttp3 0.15.0, with brotli 1.0.9, with LZ4 1.9.4, with
Zstandard 1.5.5, with libsmi 0.4.8, with dark display mode, without HiDPI, with
QPA plugin "cocoa", with LC_TYPE=C, binary plugins supported.