Wireshark-users: Re: [Wireshark-users] network monitor 3.4 traces cannot be read
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Thu, 22 Jul 2010 12:24:08 -0700
On Jul 22, 2010, at 7:59 AM, Graham Bloice wrote:

> For what its worth, I just installed NM 3.4 to capture traffic over an MS VPN which WinPCap can't handle.  Capture is fine, but NM doesn't have the protocol decoder I need (DNP3) so I tried to open the file in Wireshark 1.5.0-SVN-33615 (Win7 x64) and got the error dialog "The capture file has a packet with a network type that Wireshark doesn't support. (netmon: network type 0 unknown or unsupported)".
> 
> I can make the capture available if folks want,

I'd need to see it; I'm not having trouble reading captures from NM 3.4 with an x86-64 version from SVN 33617, so it's probably not a simple byte-order or 32-bit vs. 64-bit issue (although it might be a compiler issue).

> I presume the issue might be to do with the capture being from a VPN adaptor.

That might be it - my (virtual) Windows XP machine, on which I did the capture, doesn't have a VPN.