This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Malformed MIH 802.21 Packet

0

I have the following capture from a network of two nodes using MIH 802.21 Protocol. I am using Wireshark Version 1.12.7 on Ubuntu 14.04 x64. The MIH message seems to be OK in the binary format, however Wireshark considers it as a malformed packet. Wireshark is not able to interpret after the TLV length field of the Source MIHF ID TLV. So is it a problem in the protocol serialization or Wireshark dissector itself?

From the binary format: We have MIH header length of 8 Bytes which is interpreted correctly by Wireshark. Then Source MIHF ID TLV is 1 + 1 + 12 = 14 Bytes. The same thing for the destination MIHF ID TLV = 14 Bytes. Then Link Identifier List TLV comes which has TLV Type of (25 in Decimal or 0x19) and length of zero. Finally Registration Code TLV which has TLV Type of (11 in Decimal or 0xb) and length of one byte. The total size of this MIH frame is 41 Bytes.

alt text

asked 29 Oct '15, 03:42

Hany%20Assasa's gravatar image

Hany Assasa
21101114
accept rate: 0%


One Answer:

0

A proper bug report in bugzilla could see this solved in a following release.

answered 29 Oct '15, 05:17

Jaap's gravatar image

Jaap ♦
11.7k16101
accept rate: 14%

I have already reported it as a bug MIH Malformed Packet

(02 Nov '15, 04:03) Hany Assasa