Hmmm, It seems that the WellFleet that we have problems with uses/used a modified PPP over Sync header with 0x0703 as the first two bytes.
The first 7 bytes of the capture file contained the words TRSNIFF, which would seem to be a way to detect that it is a different capture type and allocate a DLT value to it, rather than LAPB? Does anyone have any quick hints on doing this? Regards ----- Richard Sharpe, rsharpe[at]ns.aus.com, rsharpe[at]samba.org, sharpe[at]ethereal.com, http://www.richardsharpe.com
