Wireshark mailing list archives

Re: a little bug(maybe not a bug,m3ua padding treated as malformed packet)


From: Jeff Morriss <jeff.morriss.ws () gmail com>
Date: Fri, 06 Aug 2010 13:58:58 -0400

damker wrote:
Hi experts:
      Attachment is a normal IP packet,the last "00 00 00" is m3ua padding, but treated as malformed packet.

I think the packet is malformed.

If you disable the BSSMAP dissector, the M3UA padding will correctly be 
displayed.  (It doesn't in this case because BSSMAP is throwing an 
exception.)

The last octet in the BSSMAP portion indicates that "T-GSM 400 Band 
Information present" is true which means there should be another couple 
of octets of (400-Band) info, but it's not there (thus leading to the 
exception/malformed indication).

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe

Current thread: