Unable to open Capture taken with IXIA
Hi everyone,
I'm having this error while opening packet capture trace with my Wireshark (3.0.3) installed on Mac:
"The file "test.pacp" contains record data that Wireshark doesn't support. (Pcap: network type 261 unknown or unsupported"
This trace has been generated with IXIA. When I open it with my desktop where IXIA - Veriwave suite is installed, I'm able to open it. IXIA is using Wireshark 2.4.9-IxV7.5_1.30
Is there a way to convert that trace so that I can access it on my Mac using standard Wireshark 3.0.3 version?
Do you know what type of packets are in the pcap?
Hi bubbasnmp,
the pcap contains 802.11 wifi packets. Since this was taken with IXIA Veriwave in first place, it seems the pcap was generated using an IXIA version of Wireshark (2.4.9-IxV7.5_1.30)
Also I realized that for each packet, there is an IxVeriWave Radio Tap Header. Maybe this is what causing the error while opening the pcap through a standard version of Wireshark
No, what's causing it is that IXIA used a link-layer header type not supported in Wireshark, so it didn't even try to read any of the packets and didn't even see the IxVeriWave header (I don't call it a radiotap header because it has nothing in common with radiotap headers).
What makes it something that will not be changed in Wireshark is that they grabbed an unassigned LINKTYPE_ value for their own purposes, without asking [email protected] for an assigned LINKTYPE_ value, and that value was subsequently assigned to another link-layer header type after a request to that list. We may add a dissector for the IxVeriWave header, and might get a standard ...(more)