Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] Malformed packet

From: "Mike Morrin" <Mike.Morrin@xxxxxxxxxxxx>
Date: Thu, 18 Feb 2010 16:10:31 -0000

-----Original Message-----
From: wireshark-dev-bounces@xxxxxxxxxxxxx
[mailto:wireshark-dev-bounces@xxxxxxxxxxxxx] On Behalf Of Brian Oleksa
Sent: 18 February 2010 15:49
To: Developer support list for Wireshark
Subject: [Wireshark-dev] Malformed packet

Why would I be getting a Malformed Packet error..??

I wrote a dissector where I am dissecting several packets to which I am 
very happy with the outcome in the wireshark gui.
I am getting exactly what I am expecting to get (as I hard coded the 
data in the packets).

But at the end of every packet... I get this highlighted pink line that 
says "Malformed Packet".

Again....I am very happy with the outcome of all the packets that I am 
dissecting (which tells me that my dissector "appears" to be working 

Any ideas..??

Is your dissector trying to read beyond the end of the packet?

If you can run inside a debugger, then try putting a breakpoint on the
Wireshark exception handler, it should quickly show you how the
exception is triggered.

This message contains confidential information and may be privileged. If you are not the intended recipient, please notify the sender and delete the message immediately.

ip.access Ltd, registration number 3400157, Building 2020,
Cambourne Business Park, Cambourne, Cambridge CB23 6DW, United Kingdom