[Guy Harris <guy@xxxxxxxxxxxx>]

On Jan 15, 2004, at 9:49 AM, Administrator wrote:

> I recently started using the Ethereal (great program) and was 
> wondering about a large number of RX protocol packets that are 
> displayed as [Malformed Packet].  It seems any computer I put the 
> program on generates these packets.  Is this protocol generated by the 
> Ethereal program? 

No.  Ethereal generates very few protocols (DNS, NIS, and/or NetBIOS 
Name Service, if it's translating IP addresses to host names or vice 
versa; NFS/SMB/etc. if it's accessing files from a file server or is 
itself being run from a file server).

Ethereal dissects UDP packets to or from ports 7000-7009, and to or 
from port 7021, as RX packets; if one of those ports is being used for 
something other than RX (if you're not running AFS, you're probably not 
using any UDP ports for RX), then the packets are likely to be reported 
as being malformed, as they aren't valid RX packets 9and aren't 
supposed to be).