Malformed packet


Hi Sirs,


I am new with this wireshark.
I just want to gent your 2 cents about Malformed Packet. What does this mean? And how will i be able to know the source of this?

Thanks in advance.




Malformed Packet means that the software who read/interpret the data inside the packet does NOT understand it.
It could be :

  • bug in the software
  • not up-to-date software
  • bad data in packet

Note that a message could be sent/received on many packets.
Then the software will NOT understand the message if :

  • your capture does not contain all packets (especially the 1st ones)
  • you have TCP cheksum problems (-> uncheck Edit / Preferences / Protocols / TCP / Validate checksum)

What does this mean?