Hello, I'm using wireshark to look at the data i'm capturing i'm using a hilscher netANALYZER to capture some data on the wires. With this netAnalyzer there is a transparent mode (captures the preamble aswell) is it possible to make wireshark show the preamble if it is captured or does wireshark not support the preamble at all? I googled a bit myself and it does not seem possible or am I wrong? Thanks in advance asked 01 Dec '16, 01:14  DemoLux |
2 Answers:
Yes, it does. If you go into the menu View|Internals|Supported Protocols you get a window with them all. Scroll (way) down to netANALYZER, where you can see it's supported, and which fields it dissects. This dissection is based on the netANALYZER producing capture files with the correct link layer type. answered 01 Dec '16, 06:32  Jaap ♦ |
Have you tried reading a transparent-mode capture with Wireshark? If not, don't assume it doesn't work, just try it. Wireshark does, as Jaap noted, support the link-layer header type format for transparent netANALYZER captures. If you have tried it, and it doesn't work, file a bug on the Wireshark Bugzilla, and attach the capture if possible. answered 01 Dec '16, 13:52  Guy Harris ♦♦ |
