Bill, I don't believe there is in Wireshark. You have to change the datalink type in the capture file and then setup custom offsets as I described. Did you try this and have any luck?
--Jim > -----Original Message----- > Can anyone follow up with me on this, is there a way to force a offset > so wireshark will start decoing 56 bytes inside the frame and assume it > to be a protocol like IP. > > Thanks > > Bill > _______________________________________________ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users
