This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

[Malformed Packet: CAMEL]

0

Hi,

Wireshark latest tool showing error as "Malformed Packet: CAMEL", actually filled generic filled in the CONNECT message.

Note : One more issue is also facing, the above message sent to the network but network sent Reject status with "MisTypedArgument", If you have any idea please share. The application is for modifying the CLI.

Can you check what is the issue ?, I have downloaded latest version but that version also didn't helped to decode the values properly.

Thanks, Hanosh Varghese

asked 16 Dec '16, 02:36

Hanosh's gravatar image

Hanosh
16559
accept rate: 0%

Without the capture it's very difficult for anyone else to understand your issue from a textual description.

Can you share a capture in a publicly accessible spot, e.g. CloudShark, Google Drive, DropBox etc.?

(16 Dec '16, 03:19) grahamb ♦

Hi, Thanks for the quick reply ..

Here is the cloud shark link..

https://www.cloudshark.org/captures/51d0007e87ed?filter=camel

(16 Dec '16, 03:49) Hanosh

One Answer:

1

This is kind of far from a "wireshark question" but the SCP's Generic Number argument is formatted incorrectly. It should follow the format of ITU Q.1902.3 figure 66, but instead it just includes the first field of the argument and ends abruptly. If you look at it in raw hex, no number digits are being passed, nor any other fields, after the number qualifier indicator.

answered 16 Dec '16, 22:26

Quadratic's gravatar image

Quadratic
1.9k6928
accept rate: 13%

I.e., both Wireshark and the machine to which the message was sent agree - the packet is not formatted correctly. Wireshark reported a "Malformed packet", and the machine to which the message was sent replied with a Reject status.

(17 Dec '16, 13:55) Guy Harris ♦♦

Thanks for ITU-T document reference, it was the error due to invalid digits packing.

Thanks, Hanosh Varghese

(18 Dec '16, 23:28) Hanosh

If an answer has solved your issue, please accept the answer for the benefit of other users by clicking the checkmark icon next to the answer. Please read the FAQ for more information.

(19 Dec '16, 07:46) Jaap ♦