This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I get (netmon: network type 8 unknown or unsupported) - what I need to do to read the cap file in wireshark?

0

I am using netmonitor 3.4 to capture wireless traffic, because it supports dialup mode devices. When I use editcap or wireshark, I get the above message. i do not have this problem on Vista, only on Windows 7.0 captured files.

Is there something I can do - Use Wireshark 1.2.x , capture only on one device instead of all devices?

asked 15 Apr '11, 15:11

mwk's gravatar image

mwk
1111
accept rate: 0%


One Answer:

2

Funny you should ask....

I'm just in the midst of updating Wireshark so it will handle netmon capture files "type 7", "type 8" and "type 9" "Media Types".

I expect that I'll commit a fix within the next several days.

Once I've done that, if you want, you'll be able to download a development Wireshark which will be able to handle "type 8" records.

I don't know of any workaround; maybe someone else will have a suggestion.

P.S. It would be much appreciated if you could post a bug on bugzilla.wireshark.org and attach a (small) capture file which I can use for testing. (The capture file attachment can be marked private if necessary).

Re: i do not have this problem on Vista, only on Windows 7.0 captured files.

I would find it useful if you could also provide a (short) capture file taken on Vista so i can compare it against a capture taken on Windows 7.

answered 15 Apr '11, 15:58

Bill%20Meier's gravatar image

Bill Meier ♦♦
3.2k1850
accept rate: 17%

edited 15 Apr '11, 16:11