Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] catching [Malformed Packet]

From: Chris Maynard <Chris.Maynard@xxxxxxxxx>
Date: Sat, 24 Sep 2011 16:58:13 +0000 (UTC)
Roland Knall <rknall@...> writes:

> On a similar topic, how can you mark a package as malformed?
> Especially generated packages often fail the openSAFETY dissector, and
> marking them as malformed seems to make sense in such cases.

Many dissectors make use of the expert infos for this.  Search for
expert_add_info_format and PI_MALFORMED for examples.