This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

How to view raw proto 41 packets as IPv4 packets

0

Hello all,

How can I view proto 41 packets as IPv4 traffic on an ethernet interface used as an endpoint in a 6in4 tunnel, without Wireshark interpreting the packets as IPv6 traffic?

Thanks, Pim

asked 16 Apr '17, 14:18

pimzand's gravatar image

pimzand
6112
accept rate: 0%


One Answer:

0

The easiest way is to disable the IPv6 dissector. Then you'll be left with the IPv4 packets carrying the IPv6 tunnelled traffic as data.

answered 17 Apr '17, 01:01

Jaap's gravatar image

Jaap ♦
11.7k16101
accept rate: 14%