Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-users: [Wireshark-users] Filter UDP from IP in UDP transport

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: "Scott Sheppard" <scott.sheppard@xxxxxxxxxxxxxxxxx>
Date: Tue, 10 Jul 2007 19:27:12 -0000

Title: Filter UDP from IP in UDP transport

Hello

I have a dataset where IP is transported in UDP

For each packet in the wire shark pcap capture I need to strip the first 50 bytes.

I would like to then have a new file with just the IP packets free of the encapsulating UDP wrapper.

I have been working with Filter Display but I am at a loss.

Can anyone bail me out?

Thanks

Scott

  • Follow-Ups:
    • Re: [Wireshark-users] Filter UDP from IP in UDP transport
      • From: Guy Harris
    • Re: [Wireshark-users] Filter UDP from IP in UDP transport
      • From: Small, James
  • Prev by Date: Re: [Wireshark-users] Summary reports of captured traffic to identify network usage trends?
  • Next by Date: Re: [Wireshark-users] Filter UDP from IP in UDP transport
  • Previous by thread: Re: [Wireshark-users] Summary reports of captured traffic to identify network usage trends?
  • Next by thread: Re: [Wireshark-users] Filter UDP from IP in UDP transport
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation