Re: [Ethereal-users] Malformed packet (bis)

[Breen Mullins <bmullins@xxxxxxxxxx>]

On Fri, 2005-01-07 at 14:01 -0300, John Coppens wrote:

> The packet is from a Trap, number 22, which is not documented in the
> ATMEL-MIB that comes with the CD. It's apparently a time tick, each 5
> seconds:
> 
> User Datagram Protocol, Src Port: snmp-trap (162), Dst Port: snmp-trap
> (162) Simple Network Management Protocol
>     Version: 1 (0)
>     Community: public
>     PDU type: TRAP-V1 (4)
>     Enterprise: 1.3.6.1.4.1.12350.1.1
>     Agent address: 192.168.0.254 (192.168.0.254)
>     Trap type: ENTERPRISE SPECIFIC (6)
>     Specific trap type: 22
>     Timestamp: 59400
> [Malformed Packet: SNMP]

All the data in the packet are coded correctly, but there's no payload
for the trap. Even if you want to send an empty trap every few seconds,
I think the TimeTicks field should be followed by a NULL encoding.
(See Perkins, Understanding SNMP MIBS p.403 ff.)

Breen

-- 
Breen Mullins                      408-435-8401x123       
SQA Engineer                       0xde05499b          
Asante Technologies, Inc.