Malformed Packets

john.wright · ‎11-20-2009

I routinely take traces of LAN traffic just to see what is out there. Two days ago I saw that 25% of all packets were reporting as malformed packet.

The next day I checked again and there were none. I checked again today and 25% of all traffic is reporting in the trace as a malformed packet

It looks like this.

source 00:00:00_00:00:00

dest 00:00:00_00:00:00

protocol FC

info:malformed packet

Anyone have any suggestions or insites or first steps to figure out what this is?

Giuseppe Larosa · ‎11-20-2009

Hello John,

are there vmware servers?

unconfigured vmware instances can send out packets like that.

I can see in our NME messages of frames with all zeroes MAC source and/or destination from time to time.

In other threads I found this explanation.

there may be other possible causes.

Hope to help

Giuseppe

john.wright · ‎11-20-2009

Yes we have many vmware servers.

Thank you for the response.

I just did another trace and now there are no malformed packets.

Very odd.