Skip to content

802.15.4 beacons with no superframe/gts/pending address information are shown as malformed

Summary

802.15.4 beacons that are frame version IEEE 802.15.4-2003 and that have no content following the extended source address are marked as malformed in Wireshark.

Sample capture file

802154_beacons_seen_as_malformed.pcapng

Steps to reproduce

These beacons are produced by Nanoleaf Shapes and Nanoleaf Essentials Matter A19 bulbs

What is the current bug behavior?

Beacon packets are dissected correctly but marked as malformed in Wireshark.

[Malformed Packet (Exception occurred)]
[Severity level: Error]
[Group: Malformed]

What is the expected correct behavior?

Beacon packets should not be marked as malformed

Build information

Version 4.4.2 (v4.4.2-0-g9947b17309f4).

Compiled (64-bit) using Microsoft Visual Studio 2022 (VC++ 14.41, build 34123),
with GLib 2.78.4, with Qt 6.5.3, with libpcap, with zlib 1.3.1, with zlib-ng
2.1.5, with PCRE2, with Lua 5.4.6 (with UfW patches), with GnuTLS 3.8.4 and PKCS
#11 support, with Gcrypt 1.10.2-unknown, with Kerberos (MIT), with MaxMind, with
nghttp2 1.62.1, with nghttp3 0.14.0, with brotli, with LZ4, with Zstandard, with
Snappy, with libxml2 2.11.7, with libsmi 0.5.0, with Minizip-ng , with
QtMultimedia, with automatic updates using WinSparkle 0.8.0, with AirPcap, with
binary plugins.

Running on 64-bit Windows 11 (23H2), build 22631, with 12th Gen Intel(R)
Core(TM) i9-12900 (with SSE4.2), with 16070 MB of physical memory, with GLib
2.78.4, with Qt 6.5.3, with Npcap version 1.79, based on libpcap version 1.10.4,
with PCRE2 10.43 2024-02-16, with c-ares 1.27.0, with GnuTLS 3.8.4, with Gcrypt
1.10.2-unknown, with nghttp2 1.62.1, with nghttp3 0.14.0, with brotli 1.0.9,
with LZ4 1.9.4, with Zstandard 1.5.6, without AirPcap, with light display mode,
without HiDPI, with QPA plugin "windows", with LC_TYPE=English_United
States.utf8, binary plugins supported.
Edited by Jaap Keuter
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information