Wireshark-bugs: [Wireshark-bugs] [Bug 5546] Got error "Malformed Packets" on decoding SCTP init
Date: Tue, 4 Jan 2011 11:20:37 -0800 (PST)

Jeff Morriss <[email protected]> changed:

           What    |Removed                     |Added
                 CC|                            |[email protected]

--- Comment #1 from Jeff Morriss <[email protected]> 2011-01-04 11:20:34 PST ---
The first packet really is malformed, so this isn't a bug in Wireshark.

The first packet's INIT chunk indicates that the chunk length is 108 (that's
the 6c at offset 0030), but there are only 100 bytes left in the packet (this
causes Wireshark's SCTP dissector to throw an exception, giving you the
"Malformed" packet indication).

Admittedly the display could help make this more obvious.  I hope to find a way
to do that shortly (at which point I'll close the bug).

Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.