Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 12568] Wireshark is marking BGP FlowSpec NLRI as malformed

Date: Thu, 30 Jun 2016 08:10:56 +0000

Comment # 23 on bug 12568 from
Hi Dario,

(In reply to Dario Lombardo from comment #20)
> With the current patch, I still have a malformed error, as before. The patch
> is good as per specs, but somewhere the dissector is still buggy (provided
> that the capture is error free).

We know that the provided pcap contains a malformed BGP packet (packet #2).
However originally we thought that packet #1 and packet #3 should be ok. We
will do some more manual "dissection" of packet #1 (which seems to trigger
either a bug in wireshark or is really malformed (then we need to talk to
Juniper :-) ).

I will also provide a pcap file without known malformed packets (after manual
verification).

You will hear from us soon.

Cheers Stoffi


You are receiving this mail because:
  • You are watching all bug changes.