Wireshark · Wireshark-dev: Re: [Wireshark-dev] Fwd: And again BER errors while decodingH248packets

[LEGO <luis.ontanon@xxxxxxxxx>]

On 9/25/06, ronnie sahlberg <ronniesahlberg@xxxxxxxxx> wrote:
> Are these zero length constructs actually allowed by the standard?
>
> If they are not it might be better to just abort dissection completely
> with a "[malformed packet]" message.

I honestly do not know if the standard allows for that, however,
I do not agree with aborting dissection en tout. I believe that if we
can decode it we should, but an error label  (expert info) should be
added to the item.

Luis

>

--
This information is top security. When you have read it, destroy yourself.
-- Marshall McLuhan