This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

The file "test.cap" is a capture for a network type that Wire shark doesn't support. (snoop: network type 12 unknown or unsupported) I tried to read test.cap file but i am not able to read it. could anyone help me on this?

asked 18 Nov '13, 03:54

Muthu%20Kumar's gravatar image

Muthu Kumar
11112
accept rate: 0%


Apparently you have a snoop-like capture file with a format that is not (yet) supported by Wireshark. Please file a bug report at https://bugs.wireshark.org and add as much information as possible

  • Tool name and version
  • Wireshark version
  • OS and version you tested with
  • IMPORTANT: a small sample capture file

Regards
Kurt

permanent link

answered 18 Nov '13, 10:17

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

Yes, type 12 is listed on the IANA page for snoop network types as being reserved. The DLPI specification's dlpi.h lists it as DL_ASYNC, for "Character Asynchronous Protocol", with no indication of what that means.

So please do as Kurt suggests; otherwise, we won't be able to figure out what that network type means.

(18 Nov '13, 11:45) Guy Harris ♦♦
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×13

question asked: 18 Nov '13, 03:54

question was seen: 1,745 times

last updated: 18 Nov '13, 11:45

p​o​w​e​r​e​d by O​S​Q​A