Wireshark-bugs: [Wireshark-bugs] [Bug 5546] Got error "Malformed Packets" on decoding SCTP init
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Tue, 4 Jan 2011 18:53:39 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5546

--- Comment #3 from Jeff Morriss <jeff.morriss.ws@xxxxxxxxx> 2011-01-04 18:53:38 PST ---
Poking around a bit more in that first packet, it appears that the data for the
rest of the SCTP packet *is* there, but the IP length is wrong.  As a result
the last few bytes of the SCTP data gets interpreted as Ethernet trailer.

Changing the 1st packet's IP length to 140 (in a hex editor) causes the IP
checksum to be marked as bad, but Wireshark no longer thinks the packet is
malformed.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.