Wireshark-dev: Re: [Wireshark-dev] catching [Malformed Packet]
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Chris Maynard <Chris.Maynard@xxxxxxxxx>
Date: Sat, 24 Sep 2011 16:58:13 +0000 (UTC)
Roland Knall <rknall@...> writes:

> On a similar topic, how can you mark a package as malformed?
> Especially generated packages often fail the openSAFETY dissector, and
> marking them as malformed seems to make sense in such cases.

Many dissectors make use of the expert infos for this.  Search for
expert_add_info_format and PI_MALFORMED for examples.