Looks like a short frame to me. The SCTP header mentions a length of 29,
but there aren't that many data bytes in the payload.
--J
> -----Original Message-----
> From: Stu Miller [mailto:miller@xxxxxxxxxxx]
> Sent: Tuesday, April 03, 2001 2:05 PM
> To: ethereal-users@xxxxxxxxxxxx
> Subject: [Ethereal-users] why is this frame malformed?
>
>
> Can anyone tell me why the following frame is considered
> to be malformed by ethereal:
>
> Frame 20 (78 on wire, 78 captured)
> Arrival Time: Apr 3, 2001 13:46:19.8175
> Time delta from previous packet: 0.000376 seconds
> Time relative to first packet: 2147.923719 seconds
> Frame Number: 20
> Packet Length: 78 bytes
> Capture Length: 78 bytes
> Ethernet II
> Destination: 08:00:20:b9:0e:9d (08:00:20:b9:0e:9d)
> Source: 08:00:20:d8:f0:b1 (08:00:20:d8:f0:b1)
> Type: IP (0x0800)
> Internet Protocol
> Version: 4
> Header length: 20 bytes
> Differentiated Services Field: 0x00 (DSCP 0x00: Default;
> ECN: 0x00)
> 0000 00.. = Differentiated Services Codepoint: Default (0x00)
> .... ..0. = ECN-Capable Transport (ECT): 0
> .... ...0 = ECN-CE: 0
> Total Length: 64
> Identification: 0x7763
> Flags: 0x04
> .1.. = Don't fragment: Set
> ..0. = More fragments: Not set
> Fragment offset: 0
> Time to live: 255
> Protocol: SCTP (0x84)
> Header checksum: 0xa715 (correct)
> Source: larry (172.25.2.86)
> Destination: darlington (172.25.2.56)
> Stream Control Transmission Protcol
> Source port: 9805
> Destination port: 3456
> Verification tag: 0x00000000
> Adler-32 checksum: 0x83a407a5 (correct)
> Incomplete chunk
> Identifier: 6 (ABORT)
> Flags: 0
> Length: 29
> BAD ERROR CAUSE
> Cause code: 8 (Unrecognized parameters)
> Cause length: 25
> [Malformed Frame: SCTP]
>
> 0 0800 20b9 0e9d 0800 20d8 f0b1 0800 4500 .. ..... .....E.
> 10 0040 7763 4000 ff84 a715 ac19 0256 ac19 .@wc@........V..
> 20 0238 264d 0d80 0000 0000 83a4 07a5 0600 .8&M............
> 30 001d 0008 0019 000b 0015 7468 756e 6465 ..........thunde
> 40 722e 6467 6d73 2e63 6f6d 0000 0000 r.dgms.com....
>
>
> Thank you,
> Stu Miller
> Ulticom, Inc
> miller@xxxxxxxxxxx
>
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>
