Hi, I use wireshark to debug msrp traffic. For some msg I got the following expert info: Malformed Packet (Exception occured) Severity level: Error Group: Malformed The msrp msg is fragmented into 2 segments. First segment has the malformed error. Second frame is not recognized as MSRP and only rendered as TCP frame. Problem is that the msrp data in both frames is not accessible in wireshark. Can you see why the 1st msg is malformed and why the 2nd msg is not recognized as msrp? Thank you Frame 1
Frame 2
asked 13 May ‘15, 08:18 supisupi edited 13 May ‘15, 08:32 |
One Answer:
After double checking the code, it appears that MSRP dissector does not take into account TCP fragmentation. Could you fill a bug on https://bugs.wireshark.org/bugzilla/ with a sample pcap attached? answered 13 May '15, 09:29 Pascal Quantin |
Pascal, I have opened bug https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11217 with the hope that it will be fixed soon.
Thank you.
Kindest rgds,
Markus