Wireshark · Ethereal-users: Re: [Ethereal-users] Question using Ethereal.

[Guy Harris <gharris@xxxxxxxxx>]

Mariotti, Alessandro (Alessandro) wrote:

> Malformed packet is something that ethereal is no able to debug ????

A "Malformed packet" is a packet that Ethereal's dissector for the 
protocol thinks isn't correctly constructed.  That could mean it's not 
correctly constructed, or that there's a bug in Ethereal's dissector.

If that packet really is an LCP packet, then, of the 16 bytes of option:

	the Async Control Character Map option is 6 bytes;

	the Magic Number option is 6 bytes;

	the Protocol Field Compression option is 2 bytes;

giving 14 bytes.  What are the next 2 bytes in the option field after 
that?  Do they correspond to a valid LCP option?