Wireshark-users: Re: [Wireshark-users] (no subject)
From: Kevin Cullimore <kcullimo@xxxxxxxxxx>
Date: Thu, 09 Jul 2009 02:56:27 -0400
Hansang Bae wrote:
Gaudineer, Kevin wrote:
hmmm, actually the old preso is still there. I uploaded a newer one with 'answers' in it. I'll forward you a copy tomorrow if you'd like.

is the newer one significantly different?
In the meantime, use editcap -s to cut off the data part (try to leave the TDS headers if you can) and feel free to post it here.