Hi, How about "malformed" ;) Thanx, Jaap On Mon, 11 Dec 2006, Hal Lander wrote: > If a wireshark receives a packet that is too short the dissector will flag > the packet as being Malformed. > > How do I use display filters to show me all the 'Malformed' packets? > > TIA > Hal >