Wireshark · Ethereal-dev: Re: [Ethereal-dev] malformed packet

[Devin Heitmueller <dheitmueller@xxxxxxxxxxx>]

While on this topic, is there an easy way to cause Ethereal to break on
an event like this (or pull an assert)?  With complex packet structures,
it is often difficult to determine which line of code performed the
invalid read.

-Devin

On Fri, 2003-03-21 at 13:55, Guy Harris wrote:
> On Fri, Mar 21, 2003 at 11:23:11AM +0100, ana wrote:
> > I'm using ethereal on linux. I'm working on a DSR (Dynamic Source Route) 
> > dissector, everything works, but at the end of the packet ethereal 
> > reports Malformed packet.
> > 
> > I have no idea that could mean.
> 
> It means that some dissector is attempting to fetch stuff from the
> packet that's past the end of the packet - i.e., the dissector thinks
> there's something that should be in the packet, presumably because the
> protocol specification says it should be in the packet, but, in fact,
> it's not in the packet.  A packet that's missing something that's
> supposed to be in the packet would be malformed.
> 
> _______________________________________________
> Ethereal-dev mailing list
> Ethereal-dev@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-dev
-- 
Devin Heitmueller
Senior Software Engineer
Netilla Networks Inc