Hi, please allocate a new network type for libpcap dump files, as described in http://wiki.wireshark.org/Development/LibpcapFileFormat#Global_Header . It is for dumping traffic on D-Bus, http://en.wikipedia.org/wiki/D-Bus , and the packets would contain raw D-Bus messages: http://dbus.freedesktop.org/doc/dbus-specification.html#message-protocol-messages
Martin Vidner - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.