[prev in list] [next in list] [prev in thread] [next in thread] 

List:       wireshark-users
Subject:    Re: [Wireshark-users] : Idea for corrupted packet decoding
From:       Anders Broman <anders.broman () ericsson ! com>
Date:       2010-06-29 10:37:55
Message-ID: 5FE481F6D82BB345B1DE44B566A8E2D602F8DB2698 () ESESSCMS0359 ! eemea ! ericsson ! se
[Download RAW message or body]

Hi,
Look into text2pcap...
/Anders 

-----Original Message-----
From: wireshark-users-bounces@wireshark.org \
                [mailto:wireshark-users-bounces@wireshark.org] On Behalf Of Putrycy
Sent: den 29 juni 2010 12:27
To: wireshark-users@wireshark.org
Subject: [Wireshark-users] : Idea for corrupted packet decoding

Hi everyone,

 I am developing piece of software, related to TCPIP stack. I have a weird problems, \
and no idea for how to diagnose em. Problem is : packets are getting malformed. \
Seeing em in wireshark helps a lot. Packets seem to be trimmed at the beginning and \
moved left (Ethernet II -> MACs) at exactly 2 bytes. Id like to make sure, they're \
not malformed in any other way. My idea would be to add those missing two bytes by \
hand, and then try to "decode" packet that was prepared like that. Problem is im not \
sure how to make it. Id be very grateful for any help:

Here's an example:

correct destination mac: a:b:c:d:e:f
correct source mac: o:p:q:r:s:t

These are malformed like:

dest mac: c:d:e:f:o:p
src mac: q:r:s:t:X:X
where X is something incorrect.

Thanks a lot for any suggestions.

P.
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@wireshark.org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request@wireshark.org?subject=unsubscribe
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@wireshark.org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request@wireshark.org?subject=unsubscribe


[prev in list] [next in list] [prev in thread] [next in thread]