Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] How to remove the {Malformed Packet] warning message

From: Jaap Keuter <jaap.keuter@xxxxxxxxx>
Date: Wed, 10 Dec 2008 12:47:48 +0100
Hi,

Just make sure you don't read more bytes from the tvb than that are in their. You should have some measure from the protocol fields themselves, or use tvb_length_remaining()

Thanx,
Jaap

Sent from my iPhone

On 10 dec 2008, at 10:04, spiritsince1969@xxxxxxxxx wrote:

Hi everyone,
I wrote a dissector for a special protocol, which may has only 40~44 bytes packets. Although i can dissect it as well, i'll receive a red [Malformed Packet : myprotocolname] label at the end of the packet details window . How to remove this this restrict and make wireshark allows packet which length is from 40 to 2000 bytes?
 Sorry for my poor english.



Sincerely yours,
SpiritSince1969
___________________________________________________________________________


Sent via:    Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
            mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe