Wireshark-users: [Wireshark-users] Variable decoding depth
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: "Marc Lebas" <mlebas@xxxxxxxxxx>
Date: Mon, 23 Feb 2009 13:48:26 -0000
Title: Variable decoding depth

Hi everybody,

I use Wireshark 1.0.6 for GPRS over Frame Relay and i got different depth in decoding, depending on the capture file format :

With rf5, the analysis is limited to GPRS protocol layers, but never decode IP which is the encapsulated protocol.
With libpcap, it is OK;  Wireshark go deeper as it is able to decode encapsulated IP frames in GPRS frames.

Why such a behaviour ? Did i missed something in my config ?

Here is my config on Linux (but the issue is the same on Windows) :

- preferences :  fr.encap: GPRS Network Service
- cat k12_protos : "gprs_gb","fr"

Marc