Ask Your Question
0

mergecap and dlt_user

asked 2020-07-09 08:06:52 +0000

yaroni gravatar image

i have file with dlt_user interface and some with regular ethernet interface
I successfully merged files with dlt user interface with wireshark
But when i try to merge with mergecap packet with dlt_user interface disappear.
Is it supposed to be supported?

edit retag flag offensive close merge delete

Comments

Have you looked at the mergecapman page for rules on handling encapsulation type?

Chuckc gravatar imageChuckc ( 2020-07-09 13:16:15 +0000 )edit

1 Answer

Sort by ยป oldest newest most voted
0

answered 2020-07-10 21:05:08 +0000

cmaynard gravatar image

If Wireshark can successfully merge the files but mergecap can't, then there may be a bug in mergecap. I'd recommend filing a bug on the Wireshark Bug Tracker and attaching 2 sample capture files that can be successfully merged in Wireshark but that fail to be merged with mergecap.

Before filing a bug, you should make sure you're using the latest version of Wireshark, currently 3.2.5, in case this was a known bug that has already been fixed. You might want to include your Wireshark version information from Wireshark's Help -> About Wireshark -> Copy To Clipboard when you report problems here, but certainly do so if you open a bug for this.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2020-07-09 08:06:52 +0000

Seen: 34 times

Last updated: Jul 10