Wireshark · Wireshark-users: [Wireshark-users] Can I decode the truncated packet on tshark ?

["LI, Feng" <funglee@xxxxxxxxx>]

Hey you all,

 

I have a fishy problem.  

 

We use "-s option" to save disk spaces when we did capture. Right now, I have difficultities to decode the IP headers from these captured datafile, although I have WEP key. 

 

Is there any way that I can decode the truncated packets ?

 

BTW: I put the sample packet trace at

http://amur.cs.wpi.edu/~lif/sample.cap.tgz 

the wep key is key1: A5FE6D61D704E3B982A52292A1

 

Yours

Feng