[Andrew Hood <ajhood@xxxxxxxxx>]

Hattori, Shigehiro wrote:
> Dear ethereal-user
> 
> I have a question about the message of Malformed packet.
> 
> I issued "snmpwalk" command to Cisco's LoadBalancer that is called CSS.
> Ethereal indicates the response packet of IF-MIB::ifspecific is
> malformed packet.
> 
> I issued "snmpwalk" to Catalyst4003 and Extreme's switch too.
> There is no message.
> 
> Attached capture file.
> 
> CSS - css_ifspecific.cap
> Catalyst4003 - cat4003_ifspecific.cap
> Extreme - extreme_ifspecific.cap
> 
> The following is a part of packet of CSS.
> Ethereal indicates this packet is malformed packet.
> 172.21.118.48 is snmp manager , 172.21.197.70 is CSS.
> 
> -- 
> [root@RHES3-1 root]# tethereal -x -r css_ifspecific.cap | less
>  1   0.000000 172.21.118.70 -> 172.21.197.48 SNMP RESPONSE
> IF-MIB::ifSpecific.1
> [Malformed Packet]
> 
> 0000  00 d0 59 37 2c a7 00 11 93 e5 74 46 08 00 45 00   ..Y7,.....tF..E.
> 0010  00 4a d6 bc 00 00 3f 11 11 45 ac 15 76 46 ac 15   .J....?..E..vF..
> 0020  c5 30 00 a1 04 02 00 36 43 fb 30 2c 02 01 01 04   .0.....6C.0,....
> 0030  07 68 61 74 74 6f 72 69 a2 1e 02 04 21 1c 26 e5   .hattori....!.&.
> 0040  02 01 00 02 01 00 30 10 30 0e 06 0a 2b 06 01 02   ......0.0...+...
> 0050  01 02 02 01 16 01 06 00

What ethereal version were you using? All three of your captures decode
without error with my fairly recent one.

-- 
There's no point in being grown up if you can't be childish sometimes.
                -- Dr. Who