Revision history [back]

Hi,

when i open a pcap file in a wireshark 2.6.3, it displays malformed errors for few packets in default display panel however it decodes properly when i open the same in new pop up window (double clicking on a specific packet).

i am not getting what could be the issue for diff behaviors

dissect() { case NRachPdu: { proto_item *NRach = NULL; proto_tree *NRachTree = NULL;

                            offset += 1;
                            // get the size of PDU
                            tvb_memcpy(tvb, (guint8 *)&length, offset, 1);
                            //length = tvb_get_ntohs(tvb, offset);
                            NRachTree = proto_tree_add_subtree(fapi_tree, tvb, offset-1, length, ett_fapi_NRach, &NRach, "NRACH PDU");
                            proto_tree_add_item(NRachTree, hf_fapi_NRachpdusize, tvb, offset, 1, encoding);
                            ..................

}

Hi,

when i open a pcap file in a wireshark 2.6.3, it displays malformed errors for few packets in default display panel however it decodes properly when i open the same in new pop up window (double clicking on a specific packet).

i am not getting what could be the issue for diff behaviors

dissect() { case NRachPdu: { proto_item *NRach = NULL; proto_tree *NRachTree = NULL;

                            offset += 1;
                            // get the size of PDU
                            tvb_memcpy(tvb, (guint8 *)&length, offset, 1);
                            //length = tvb_get_ntohs(tvb, offset);
                            NRachTree = proto_tree_add_subtree(fapi_tree, tvb, offset-1, length, ett_fapi_NRach, &NRach, "NRACH PDU");
                            proto_tree_add_item(NRachTree, hf_fapi_NRachpdusize, tvb, offset, 1, encoding);
                            ..................

}

Hi,

when i open a pcap file in a wireshark 2.6.3, it displays malformed errors for few packets in default display panel however it decodes properly when i open the same in new pop up window (double clicking on a specific packet).

i am not getting what could be the issue for diff behaviors

dissect()
{
     case NRachPdu:
     {
         proto_item *NRach     = NULL;
         proto_tree *NRachTree = NULL;
 
 NULL;

        offset += 1;
         // get the size of PDU
         tvb_memcpy(tvb, (guint8 *)&length, offset, 1);
         //length = tvb_get_ntohs(tvb, offset);
         NRachTree = proto_tree_add_subtree(fapi_tree, tvb, offset-1, length, ett_fapi_NRach, &NRach, "NRACH PDU");
         proto_tree_add_item(NRachTree, hf_fapi_NRachpdusize, tvb, offset, 1, encoding);
         ..................
}
  
}