Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Ethereal-dev: Re: [Ethereal-dev] malformed packet

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Fri, 21 Mar 2003 10:55:45 -0800
On Fri, Mar 21, 2003 at 11:23:11AM +0100, ana wrote:
> I'm using ethereal on linux. I'm working on a DSR (Dynamic Source Route) 
> dissector, everything works, but at the end of the packet ethereal 
> reports Malformed packet.
> 
> I have no idea that could mean.

It means that some dissector is attempting to fetch stuff from the
packet that's past the end of the packet - i.e., the dissector thinks
there's something that should be in the packet, presumably because the
protocol specification says it should be in the packet, but, in fact,
it's not in the packet.  A packet that's missing something that's
supposed to be in the packet would be malformed.