This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

[Malformed Packet: RADIUS]

0

After settting up a trace i found this error :

User Datagram Protocol, Src Port: 23361 (23361), Dst Port: radius-acct (1813)
[Malformed Packet: RADIUS]
    [Expert Info (Error/Malformed): Malformed Packet (Exception occurred)]
        [Message: Malformed Packet (Exception occurred)]
        [Severity level: Error]
        [Group: Malformed]

what could be the cause?

asked 05 Aug '11, 07:09

jay's gravatar image

jay
1111
accept rate: 0%

edited 05 Aug '11, 07:22

SYN-bit's gravatar image

SYN-bit ♦♦
17.1k957245


One Answer:

1

This either was not a radius accounting packet, but wireshark thought it was because it was sent on the radius accounting port (1813) or it was indeed a radius accounting packet, but wireshark was not able to dissect it correctly.

answered 05 Aug '11, 07:25

SYN-bit's gravatar image

SYN-bit ♦♦
17.1k957245
accept rate: 20%

We'd need to see the trace - or, at least, the offending packet from the trace - to know for sure, but my suspicion is that it wasn't a RADIUS packet but was dissected as such because it was sent to port 1813. (TCP and UDP ports, unlike, for example, Ethernet packet types, are not certain indicators of packet types.)

(05 Aug '11, 17:38) Guy Harris ♦♦