Wireshark-users: Re: [Wireshark-users] Nettl HP-UX
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Andrej van der Zee <andrejvanderzee@xxxxxxxxx>
Date: Mon, 20 Jun 2011 00:51:04 +0200
>
> The short-term workaround would be to modify editcap to map some of the WTAP_ENCAP_NETTL_ encapsulations to equivalent encapsulations supported by pcap/pcap-ng, and to discard the nettl pseudo-header information.

I just found the nettl files I am facing have packets with two
different encapsulation types:
* Ethernet with nettl headers
* Raw IP with nettl headers

Is there a way to convert either Ethernet to Raw IP or visa versa so
that I end up with one encapsulation type?

Thank you,
Andrej