Wireshark · Wireshark-dev: Re: [Wireshark-dev] text2pcap_ several protocols file

[Jeff Morriss <jeff.morriss.ws@xxxxxxxxx>]

SOLTANI FATEN wrote:
> Hi all, 
> I have a text file which contains a MTP3 frames MTP3. To convert this
> file into a pcap file and to decode it thereafter by Wireshark, I used:
> "text2pcap -l 141 inputFile.txt outputFile.pcap". 
> But now I wish to decode a file which contains both of IP and MTP3
> frames. How can I do that. 
> Thanks for any Idea

You can't do that with PCAP files.

Being able to have multiple protocols in one file is one of the goals of 
the PCAP-NG file format but that's not fully supported yet.

There may be other file formats that could do it but:
	- I don't know what they are
	- Even if such a format exists, text2pcap only creates PCAP files