Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

For the sample capture attached to 14110: TDS (Tabular Data Stream) and SMP (SMUX) protocols misdissected in captures with MARS enabled, if the TDS reassembly preferences are unchecked:

image description

it causes many Malformed TDS expert info entries:

image description

Frame 1038 (Exception occurred) type messages are common when the dissector asks for more data than is available. The dissector asked but it's the main Wireshark memory management that flagged it as a Malformed Packet so there are no dissector preferences to set.

[Malformed Packet: TDS]
    [Expert Info (Error/Malformed): Malformed Packet (Exception occurred)]
        [Malformed Packet (Exception occurred)]
        [Severity level: Error]
        [Group: Malformed]

image description

The Expert Info added in frame 155 was added by the TDS dissector so the preference menu can be reached.

Hostname length: 40
    [Expert Info (Error/Malformed): Invalid hostname length (40)]
        [Invalid hostname length (40)]
        [Severity level: Error]
        [Group: Malformed]

image description