On 9/25/06, ronnie sahlberg <[EMAIL PROTECTED]> wrote: > Are these zero length constructs actually allowed by the standard? > > If they are not it might be better to just abort dissection completely > with a "[malformed packet]" message.
I honestly do not know if the standard allows for that, however, I do not agree with aborting dissection en tout. I believe that if we can decode it we should, but an error label (expert info) should be added to the item. Luis > -- This information is top security. When you have read it, destroy yourself. -- Marshall McLuhan _______________________________________________ Wireshark-dev mailing list Wireshark-dev@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-dev
