I have the following capture from a network of two nodes using MIH 802.21 Protocol. I am using Wireshark Version 1.12.7 on Ubuntu 14.04 x64. The MIH message seems to be OK in the binary format, however Wireshark considers it as a malformed packet. Wireshark is not able to interpret after the TLV length field of the Source MIHF ID TLV. So is it a problem in the protocol serialization or Wireshark dissector itself? From the binary format: We have MIH header length of 8 Bytes which is interpreted correctly by Wireshark. Then Source MIHF ID TLV is 1 + 1 + 12 = 14 Bytes. The same thing for the destination MIHF ID TLV = 14 Bytes. Then Link Identifier List TLV comes which has TLV Type of (25 in Decimal or 0x19) and length of zero. Finally Registration Code TLV which has TLV Type of (11 in Decimal or 0xb) and length of one byte. The total size of this MIH frame is 41 Bytes. asked 29 Oct '15, 03:42 Hany Assasa |
One Answer:
A proper bug report in bugzilla could see this solved in a following release. answered 29 Oct '15, 05:17 Jaap ♦ |
I have already reported it as a bug MIH Malformed Packet