First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

Malformed packet LBMSRS_2

  • retag add tags

Dear

I am using Wireshark to take a csv log from server, listening UDP or TCP port. NBIoT device is sending messages in hex format to server. Messages look like “Message 1”. Server is answering "Answer 1". In case of UDP sending and reciving, messages are decoded and everithing is OK. In case of TCP. Messages sent to server are nor decoded. TCP payload is visible in hex, but it can not be decode. It is written "Malformed packet LBMSRS". This started after upgrade. I am using Version 3.4.8

How can I correct this to get decoded “Message 1”

I can not add picture

Br

Tomislav

Piltti's avatar
5
Piltti
asked 2021-09-20 07:38:12 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

1 Answer

0

LBMSRS is a heuristic tcp dissector so may be picking up your traffic by mistake. You can disable the protocol by right-clicking the protocol in the packet details list and choosing Protocol Preferences -> Disable LBMSRS or from Analyze -> Enabled Protocols... and entering LBMSRS in the search box and unchecking it's entry in the list.

grahamb's avatar
23.8k
grahamb
answered 2021-09-20 13:01:23 +0000
edit flag offensive 0 remove flag delete link

Comments

Hi,

first option ...Protocol Preferences was alowed to Disable LBMSRS. Second option... Analyze.. Enable Protocols..Uncheck box LBMSRS did the job.

Thx:)

Piltti's avatar Piltti (2021-09-21 10:27:35 +0000) edit

If an answer has solved your issue, then please "accept" it by clicking the checkmark icon to the left of the answer so that others with the same\similar question may know what helped.

grahamb's avatar grahamb (2021-09-21 10:50:27 +0000) edit
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer