Hello, I am trying to decode below type of packets. They're captured on multicast service interface (mt-*), and after a proprietary header, it's simple L3 data.
There seem to be some work already done in this regards, as the first 4 bytes are defined in there:
Alternatively, I can convert the pcap to text, add a L2 header, and convert it back to pcap, but that is a cumbersome process. Any other ideas how to decode those packets? Thanks! asked 17 Nov '14, 10:59 YLT |
One Answer:
You could try stripping the Juniper header using an "Edit" task in TraceWrangler, but so far I have only coded it to support doing that for packets with Ethernet headers following the Juniper header. I'll have to add code to be able to add a pseudo Ethernet header, but if this isn't urgent I could do it. answered 17 Nov '14, 11:16 Jasper ♦♦ |