From Pieter de Boer:

tshark can read a HP-UX nettl IP packet dump (written with 'nettl -traceon all
-entity ns_ls_ip -file dump'), but cannot convert it to a pcap raw IP packet
dump, with 'tshark -r dump.nettl -w dump.pcap'. A single-line patch to
wiretap/libpcap.c makes it possible to do this.

The input file uses encapsulation type WTAP_ENCAP_NETTL_RAW_IP.

svn path=/trunk/; revision=22849
This commit is contained in:
Jaap Keuter 2007-09-11 21:31:21 +00:00
parent 2aaad94ffd
commit 42ee794742
1 changed files with 1 additions and 0 deletions

View File

@ -612,6 +612,7 @@ static const struct {
{ 1, WTAP_ENCAP_NETTL_ETHERNET },
{ 6, WTAP_ENCAP_NETTL_TOKEN_RING },
{ 10, WTAP_ENCAP_NETTL_FDDI },
{ 70, WTAP_ENCAP_RAW_IP },
{ 101, WTAP_ENCAP_NETTL_RAW_IP },
/*