Wireshark-bugs: [Wireshark-bugs] [Bug 5546] Got error "Malformed Packets" on decoding SCTP init
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Tue, 4 Jan 2011 11:20:37 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5546

Jeff Morriss <jeff.morriss.ws@xxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |jeff.morriss.ws@xxxxxxxxx

--- Comment #1 from Jeff Morriss <jeff.morriss.ws@xxxxxxxxx> 2011-01-04 11:20:34 PST ---
The first packet really is malformed, so this isn't a bug in Wireshark.

The first packet's INIT chunk indicates that the chunk length is 108 (that's
the 6c at offset 0030), but there are only 100 bytes left in the packet (this
causes Wireshark's SCTP dissector to throw an exception, giving you the
"Malformed" packet indication).

Admittedly the display could help make this more obvious.  I hope to find a way
to do that shortly (at which point I'll close the bug).

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.