Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 5546] Got error "Malformed Packets" on decoding SCTP init

Date: Tue, 4 Jan 2011 11:20:37 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5546

Jeff Morriss <jeff.morriss.ws@xxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |jeff.morriss.ws@xxxxxxxxx

--- Comment #1 from Jeff Morriss <jeff.morriss.ws@xxxxxxxxx> 2011-01-04 11:20:34 PST ---
The first packet really is malformed, so this isn't a bug in Wireshark.

The first packet's INIT chunk indicates that the chunk length is 108 (that's
the 6c at offset 0030), but there are only 100 bytes left in the packet (this
causes Wireshark's SCTP dissector to throw an exception, giving you the
"Malformed" packet indication).

Admittedly the display could help make this more obvious.  I hope to find a way
to do that shortly (at which point I'll close the bug).

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.