This is our old Q&A Site. Please post any new questions and answers at

Hi I am trying to send a UDP data packet of 13 octets from: port 3001

to: port 3000

Wireshark shows the packet as:

PDUType: Fire[Malformed Packet]

The destination returns an ICMP packet that Wireshark marks: 'Destination unreachable'.

The UDP packet looks ok to me. How should I upload it to here so that someone can help by checking it please?

Best regards


asked 26 Jul '16, 06:19

DavidA_2015's gravatar image

accept rate: 50%

Can you share a capture in a publicly accessible spot, e.g. CloudShark, Google Drive, Dropbox etc.?

(26 Jul '16, 06:23) grahamb ♦

Port 3000 is the default port for the DIS (Distributed Interactive Simulation) protocol. So Wireshark tries to dissect this UDP datagram as being a DIS packet, but the payload is too short (that's why you get the malformed error).

If this is not a DIS packet and you just want to see the UDP payload, go to Analyze -> Enabled Protocols and uncheck DIS dissector, or go to Edit -> Preferences -> Protocols -> DIS and change the default UDP port value.

permanent link

answered 26 Jul '16, 06:47

Pascal%20Quantin's gravatar image

Pascal Quantin
accept rate: 30%

Thank you both for your answers.

(26 Jul '16, 07:04) DavidA_2015

You ICMP packet is being sent to UDP port 3000 which is the default configured port for the DIS protocol, so is being dissected as such.

To fix this disable the DIS dissector; in the packet details pane, right click the tree item for DIS and selected "Protocol Preferences ->" -> "Disable DIS ...", then in the Enabled Protocols dialog uncheck DIS and click OK on the dialog. Reload the capture using the menu View -> Reload.

permanent link

answered 26 Jul '16, 06:51

grahamb's gravatar image

grahamb ♦
accept rate: 22%

@Pascal Quantin was a bit quicker than me :-)

(26 Jul '16, 06:52) grahamb ♦
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 26 Jul '16, 06:19

question was seen: 2,593 times

last updated: 26 Jul '16, 07:59

p​o​w​e​r​e​d by O​S​Q​A