Wireshark-users: Re: [Wireshark-users] Wireshark decode complaining about Malfromed packet - (bogus, payload length ...)

From: Jaap Keuter <jaap.keuter@xxxxxxxxx>
Date: Tue, 15 Sep 2009 17:00:09 +0200

Hi,

You might want to try an up-to-date release version of Wireshark, since
these show no errors as far as I can see.

Thanx,
Jaap

On Mon, 14 Sep 2009 08:50:00 -0700, "Ramji Vaithianathan (rvaithia)"
<rvaithia@xxxxxxxxx> wrote:
> Hi,
>  
> I was trying to capturing DNS packets using Wireshark, and it gave
> errors about bogus payload length.
>  
> For example in the Frame 23 in the dump:
>  
>   IP length is 324 bytes
>   UDP length is 304 bytes
>  
> However there is a complaint about bogus payload length 49 : Bad length
> value 304 > IP payload length
>  
> Any idea why this is coming eventhough the entire packet was captured.
> The bytes beyond 49 bytes in the payload are treated as Ethernet trailer
> packets.
>  
> Thanks,
> 
> Ramji