Thanks for the reply,
Ispent much time in giving the encapsulation filetype for ethereal,
As you say I am trying to read a file of the following format.
Ethereal is displaying the unknown hex dump in the third window,the UNKNOWN_ENCAP_PCAP in the column info field some -ve value of the time etc.
First I want to know what are those values and how to display the values from our file which has been read properly.
The file format which i am trying to read is as follows
36| 0:00:02|1692496|expr_1 >expr_2 |packet_info_1
|^M
10 00 71 00 00 00 42 71 B8 07 09 18 10 93 00 05^M/* some hexdump unlimit
ed */
37| 0:00:02|1692496|expr1 >expr2 |ipacket_info_2
|^M
0C 00 00 00 03 00 10 00 00 FF FF FF^M
38| 0:00:02|1692503|expr_1 >expr2 |packet-ifo_3
|^M /* follows some hex dump */
named as .DEC file.
Any one please please suggest me how to go with this problem
and tell me the ENCAP value suitable to the following format.
regards
Harsha