Hi 'Wireshark', I have an issue with decoding a pcap trace containing an INAP error (error on an InitialDP). Wireshark says: BER Error: This field lies beyond the end of the known sequence definition. In my opinion, the packet is okay. And the BER error points to a field (SystemFailure parameter) that Wireshark already has decoded properly. What's wrong? I used the following wiresharks: 1.10.14 (Red Hat 4.8.3-7) Link to pcap (packet number 7 has the 'yellow' decoding error). asked 17 Mar '16, 02:08  Guadalagara |
One Answer:
As the issue is still present in 2.0.2, and as to me the message contents seems to be OK too, I'd recommend you to file a bug at Wireshark bugzilla. answered 17 Mar '16, 03:06  sindy |
A fix is beeing reviewed https://code.wireshark.org/review/#/c/14501/
That is what I call a quick response. Thanxs!
Note that the change is currently only in master, so you'll have to build your own copy, likely to be difficult on such an old platform, or copy the captures over to a more modern platform where you can build from master.
Noted with thanks.