DNP Malformed Packets and Write, Unknown

Hi,

I am trying to understand a DNP3 trace from an Outstation (DNP3 server).

Some outstation frames are showing as "Response [Malformed Packet]"
Noticing an unexpected "Write, Unknown Object type" from the outstation to the client.

Could this be a dissector error in Wireshark or is this a true protocol implementation error in the outstation?

Regards,

Could this be a dissector error in Wireshark

Yes, it could be.

or is this a true protocol implementation error in the outstation?

It could also be a protocol implementation error.

Submit an issue on the Wireshark issue list, and attach the trace file (pcap/pcapng/etc., not a screenshot) with enough packets in it to show the problem. You can check the "This issue is confidential and should only be visible to team members with at least Reporter access." checkbox if there's information in the packet trace that shouldn't be made public. That way, we can look at the trace to see what the problem is and, if it's a dissector error, figure out how to fix it, and then test the fix by using the trace.

19.9k

Guy Harris

answered 2023-11-02 05:57:22 +0000

edit flag offensive 0 remove flag delete link

Comments

Thanks Guy. I have submitted the issue and the trace as suggested. https://gitlab.com/wireshark/wireshar...

Gonzo (2023-11-07 05:10:16 +0000) edit

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

DNP Malformed Packets and Write, Unknown edit

Comments

1 Answer

Comments