ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Wireshark-dev: Re: [Wireshark-dev] [PATCH] Bogus length reported for reassembled UDP packets

From: Jeff Morriss <jeff.morriss@xxxxxxxxxxx>
Date: Tue, 06 Feb 2007 09:15:07 +0800


Andrej Mikus wrote:
Hi,

Wireshark complains about bogus udp length when processing last fragment
of UDP data. It compares length field from UDP header with payload size
of last fragment.

Attached is my attempt to fix this by referring to tvp->length instead
of pinfo->iplen - pinfo->iphdrlen. Not entirely sure if it is the best
way, but appears to work for me.

This was committed by Jaap in rev 20722.