I did a capture at a remote site using my laptop. When I view the capture on my desktop machine running the same version of Wireshark, only raw data is displayed with UNKNOWN in the protocol column. Is there another file that I need to move from the laptop to desktop to decode the capture file?
Steve / Canada
asked 28 Oct '10, 06:26
There's something wrong with your capture file, or you're the victim of a PracticalJoke. The commandline tool capinfo may provide some sanity checking for you.
answered 28 Oct '10, 08:07