On Fri, 25 Nov 2005, Asensio Pradas Parra wrote:
> Dear Sirs:
> What does "Malformed packet" mean?.
>
> May you help me?....Thanks
>
Hi,
Malformed packet means that the dissector can't work out the contents of
the packet any further. This can have various reasons:
* The chosen dissector is wrong for this packet
* The packet is longer that a single frame and not reassembled
* There is a bug in the dissector
* (dare I say it?) The packet is wrong
Any of these is possible. You'll have to look into the specific situation
to determine what it is. You could disable the dissector by disabling the
protocol on the Analyzer menu and check how Ethereal displays the packet
then. You could (if it's TCP) enable reassembly for TCP and the specific
dissector (if possible) in the Edit|Preferences menu. You could check the
packet contents yourself by reading the packet bytes and comparing it to
the protocol specification. This could reveil a dissector bug. Or you
could find out that the packet is indeed wrong.
Have fun,
Jaap
