Ethereal-users: Re: [Ethereal-users] Question about Malformed packet when issuing snmpwalk comma

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Andrew Hood <ajhood@xxxxxxxxx>
Date: Sat, 29 Oct 2005 21:15:41 +1000
Hattori, Shigehiro wrote:
> Dear ethereal-user
> 
> I have a question about the message of Malformed packet.
> 
> I issued "snmpwalk" command to Cisco's LoadBalancer that is called CSS.
> Ethereal indicates the response packet of IF-MIB::ifspecific is
> malformed packet.
> 
> I issued "snmpwalk" to Catalyst4003 and Extreme's switch too.
> There is no message.
> 
> Attached capture file.
> 
> CSS - css_ifspecific.cap
> Catalyst4003 - cat4003_ifspecific.cap
> Extreme - extreme_ifspecific.cap
> 
> The following is a part of packet of CSS.
> Ethereal indicates this packet is malformed packet.
> 172.21.118.48 is snmp manager , 172.21.197.70 is CSS.
> 
> -- 
> [root@RHES3-1 root]# tethereal -x -r css_ifspecific.cap | less
>  1   0.000000 172.21.118.70 -> 172.21.197.48 SNMP RESPONSE
> IF-MIB::ifSpecific.1
> [Malformed Packet]
> 
> 0000  00 d0 59 37 2c a7 00 11 93 e5 74 46 08 00 45 00   ..Y7,.....tF..E.
> 0010  00 4a d6 bc 00 00 3f 11 11 45 ac 15 76 46 ac 15   .J....?..E..vF..
> 0020  c5 30 00 a1 04 02 00 36 43 fb 30 2c 02 01 01 04   .0.....6C.0,....
> 0030  07 68 61 74 74 6f 72 69 a2 1e 02 04 21 1c 26 e5   .hattori....!.&.
> 0040  02 01 00 02 01 00 30 10 30 0e 06 0a 2b 06 01 02   ......0.0...+...
> 0050  01 02 02 01 16 01 06 00

What ethereal version were you using? All three of your captures decode
without error with my fairly recent one.

-- 
There's no point in being grown up if you can't be childish sometimes.
                -- Dr. Who