On Thu, Dec 07, 2006 at 01:10:44PM -0800, Stephen Fisher wrote:
> On Thu, Dec 07, 2006 at 01:04:58PM -0600, Kota, Sudhindra wrote:
>
> > I found this on the Wireshark-dev list. I think it is a patch for
> > Wireshark.
> >
> > http://www.wireshark.org/lists/wireshark-dev/200606/msg01818.html
>
> Thanks. The same patches work on Unix as on Windows. That patch must
> have been missed for inclusion in Wireshark. Unfortunately, your
> capture file still has 8 malformed packets with this new patch. I
> will contact the person who wrote it to see if they still need that
> patch applied and if they have an updated one by chance that we can
> put into Wireshark to fix your problem.
My e-mail to that patch's author bounced, so we probably aren't going to
get an updated version of that patch. When I applied the patch locally
and viewed your capture file, there were just as many malformed packets
as before so that patch won't help unfortunately.
Do you have a link to the specifications for that protocol? With that,
someone may have some spare time to change the dissector to work with
the traffic you're seeing.
Steve
