Ethereal-users: Re: [Ethereal-users] Decoding with an intermediate non recognized layer

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Michael Tuexen <Michael.Tuexen@xxxxxxxxxxxxxxxxx>
Date: Tue, 20 Jun 2006 20:41:30 +0200
What about providing a dissector for the "unknown protocol"? Or making a specification
available such that it can be included in a future version of Wireshark.

Best regards
Michael

On Jun 20, 2006, at 5:54 PM, jose alonso wrote:

Hi, i have captures of messages following next stack: Phy / Eth / IP / Tcp / 2 octets / SCCP / RANAP ..., the problem is layer between TCP and SCCP, consisting of two octets, an unrecognized format that makes impossible decoding upper layers, which are known for Ethereal. Is there any way to configure an : ignore these two octets an continue decoding from there', or something similar to avoid this 'layer'? Maybe some kind of output manipulation to overwrite these octets with some dummy, but known, header like M3UA...?
I would thank any idea, i'm new in Ethereal.

Alonso


LLama Gratis a cualquier PC del Mundo.
Llamadas a fijos y móviles desde 1 céntimo por minuto.
http://es.voice.yahoo.com
_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users

_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users