malformed packet GSM SIM

asked 2024-11-15 18:45:46 +0000

javanes
1 ●1

updated 2024-11-15 19:44:08 +0000

Hi, I am receiving malformed packet error message in wireshark as illustrated below:

https://drive.google.com/file/d/1a9lm...

Thank you, Regards, Javanes

edit retag flag offensive close merge delete

Comments

Better post a capture file on a public file share and add the link to your question.

Jaap ( 2024-11-15 19:26:32 +0000 )edit

Can you update the question with the output of wireshark -v or contents of Help->About Wireshark:Wireshark tab.

I'm not getting any malformed packets with the latest development branch.
Which packet(s) do you see the errors?

Chuckc ( 2024-11-15 23:16:04 +0000 )edit

Dumpcap 3.2.3 on Linux was apparently used to create the pcapng file. Running Wireshark 3.2.3 will report Malformed packets for all but the first (frame 23) of the packets that match the display filter of 'gsmtap.sim_sub_type == 1' (SIM Type: ATR (1)). With current master these same frames (with the exception of frame 23) show no information in the Info column when encountered.

Jim Young ( 2024-11-15 23:37:59 +0000 )edit

Please see the output of wireshark -v or contents of Help->About Wireshark:Wireshark tab.:

Version 4.4.1 (v4.4.1-0-g575b2bf4746e).

Compiled (64-bit) using Microsoft Visual Studio 2022 (VC++ 14.41, build 34123),
with GLib 2.78.4, with Qt 6.5.3, with libpcap, with zlib 1.3.1, with zlib-ng
2.1.5, with PCRE2, with Lua 5.4.6 (with UfW patches), with GnuTLS 3.8.4 and PKCS
#11 support, with Gcrypt 1.10.2-unknown, with Kerberos (MIT), with MaxMind, with
nghttp2 1.62.1, with nghttp3 0.14.0, with brotli, with LZ4, with Zstandard, with
Snappy, with libxml2 2.11.7, with libsmi 0.5.0, with Minizip-ng , with
QtMultimedia, with automatic updates using WinSparkle 0.8.0, with AirPcap, with
binary plugins.

Running on 64-bit Windows 11 (23H2), build 22631, with AMD Ryzen 5 PRO 5650U
with Radeon Graphics (with SSE4.2), with ...

(more)

javanes ( 2024-11-17 22:49:13 +0000 )edit

I see the issue with "GSM SIM" packets.

javanes ( 2024-11-17 22:53:35 +0000 )edit

see more comments