Wireshark-users: Re: [Wireshark-users] Malformed packet within Putty's 0.52 SSH
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: LDB <thesource@xxxxxxxxxxx>
Date: Sat, 07 Oct 2006 10:12:32 -0400
Stephen Fisher wrote:

On Sat, Oct 07, 2006 at 12:15:44AM -0400, LDB wrote:
Within Ethereal I am detecting a malformed packet coming from a Putty SSH Client using version 0.52. Could my users have downloaded a tainted version of Putty? 

Also, why does Ethereal consider it a malformed packet from SSH?
It depends on the traffic it is considering malformed. If you would like to send a small capture file with only a few packets/the one that is malformed someone may be able to give further details. It may just be a bug in the Ethereal/Wireshark dissector - try upgrading to the latest Wireshark and see if it is still malformed. 


Steve

_______________________________________________
Wireshark-users mailing list
Wireshark-users@xxxxxxxxxxxxx
http://www.wireshark.org/mailman/listinfo/wireshark-users


I will try upgrading because I am using ethereal with my SuSE 10.1
distro.

Thanks,

LDB