Ethereal-users: Re: [Ethereal-users] Question using Ethereal.

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <gharris@xxxxxxxxx>
Date: Fri, 06 May 2005 12:31:02 -0700
Mariotti, Alessandro (Alessandro) wrote:


Malformed packet is something that ethereal is no able to debug ????
A "Malformed packet" is a packet that Ethereal's dissector for the protocol thinks isn't correctly constructed. That could mean it's not correctly constructed, or that there's a bug in Ethereal's dissector. 

If that packet really is an LCP packet, then, of the 16 bytes of option:

	the Async Control Character Map option is 6 bytes;

	the Magic Number option is 6 bytes;

	the Protocol Field Compression option is 2 bytes;
giving 14 bytes. What are the next 2 bytes in the option field after that? Do they correspond to a valid LCP option?