Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] Malformed packet

From: Brian Oleksa <oleksab@xxxxxxxxxxxxxxxxxxxxxx>
Date: Thu, 18 Feb 2010 13:57:33 -0500


Unfortunately.. I do not have a debugger available.

It doesn't appear to be reading beyond the end of the packet....but without a debugger handy... I am not sure how I can tell.

Any other help is greatly appreciated.


Mike Morrin wrote:
-----Original Message-----
From: wireshark-dev-bounces@xxxxxxxxxxxxx
[mailto:wireshark-dev-bounces@xxxxxxxxxxxxx] On Behalf Of Brian Oleksa
Sent: 18 February 2010 15:49
To: Developer support list for Wireshark
Subject: [Wireshark-dev] Malformed packet

Why would I be getting a Malformed Packet error..??

I wrote a dissector where I am dissecting several packets to which I am very happy with the outcome in the wireshark gui. I am getting exactly what I am expecting to get (as I hard coded the data in the packets).

But at the end of every packet... I get this highlighted pink line that says "Malformed Packet".

Again....I am very happy with the outcome of all the packets that I am dissecting (which tells me that my dissector "appears" to be working properly).

Any ideas..??

Is your dissector trying to read beyond the end of the packet?

If you can run inside a debugger, then try putting a breakpoint on the
Wireshark exception handler, it should quickly show you how the
exception is triggered.

This message contains confidential information and may be privileged. If you are not the intended recipient, please notify the sender and delete the message immediately.

ip.access Ltd, registration number 3400157, Building 2020, Cambourne Business Park, Cambourne, Cambridge CB23 6DW, United Kingdom
Sent via:    Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>