By default text2pcap assumes the data is encapsulated as ethernet,
anyway you can choose which encapsulation your data is using.
Try first with options
-l 127 ( 802.11 plus radiotap WLAN header )
-l 163 ( 802.11 plus AVS WLAN header )
If neither of those work, you can get the latest svn snapshot from
http://www.ethereal.com/distribution/buildbot-builds/ and then you can
use "-l 147" and set the preferences of DLT_USER00 to decode the
payload as any protocol you like (use the filter name [lowercase] of
the protocol). You can also choose how many bytes (if any) you want to
get rid of before and after that protocol (you can also choose to
decode the header and trailer as you wish).
On 6/8/05, balasundaram, murali <murali.balasundaram@xxxxxxxxxx> wrote:
> Hello Sir,
> I have few questions about converting text to pcap. I tried to use text2pcap command in Linux to convert the text file (details included for IEE802.11) to pcap but the problem is instead of decoding it to IEE802.11 its detecting as Token Ring or ethernet paskage. But the hex data values are same. I am wondering about what might be wrong in using text2pcap or is this function only for ethernets?
>
>
> Waiting for your reply,
>
> Thanks,
> Murali
>
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>
--
This information is top security. When you have read it, destroy yourself.
-- Marshall McLuhan
