Hello
If you have converted your data with text2pcap, you can define the link layer with the -l option ex: text2pcap -l 141 data.txt data_mtp3.pcap So, wireshark will decode as raw mtp3 Regards Florent << I have taken some raw SS7 MTP3 data from our application and have converted it to pcap format. Wireshark is able to pull this file in, but it is looking at it as if it was Ethernet. It is expecting the first six octets to be the MAC address, etc. It is MTP3 data, starting with the SIO octet, then the two 24 bit point codes, then the SLS, etc. Is it possible to tell wireshark, "interpret this as MTP3 and don't worry about there not being any link-level (or lower) data" I'm thinking there has to be a way of short circuiting the lower layer dissectors. Any help is appreciated. Thanks in advance. >> _______________________________________________ Wireshark-users mailing list [email protected] http://www.wireshark.org/mailman/listinfo/wireshark-users
