My last post on this subject wound up on the wrong forum, so I'd like to repost
here. My traffic is encapsulated in a VPN tunnel, when it is unencrypted I can
see the start of the IP protocol 5 bytes into the payload. The first 5 bytes
are overhead protocols for the tunnel itself (some form of PPP I believe). In
any event I could care less at this time about those 5 bytes and I don't even
understand that protocol enough at the moment to dissect and decode it (nor am
I interested).
If I could simply use "decode as - IP" and set an offset into the payload I
would be happy. Guy seems to be persuading me to use the LUA interface, but I
have not heard from Luis to hear his input. Also I have never used LUA or the
LUA interface so I may need a little guidance if that is my only realistic
option.
This is a back burner project for me now, but I want the capability in place
before it becomes essential to my development/debug.
Thanks as always for your help.
Bill
---------------------------------
No need to miss a message. Get email on-the-go
with Yahoo! Mail for Mobile. Get started.
_______________________________________________
Wireshark-dev mailing list
[email protected]
http://www.wireshark.org/mailman/listinfo/wireshark-dev
