Wireshark · Ethereal-dev: Re: [Ethereal-dev] Decoding SCCP from a trace

[Michael Tuexen <Michael.Tuexen@xxxxxxxxxxxxxxxxx>]

You need an application writing the packets in libpcap format
to a named pipe, for example. Using the -i option for ethereal you can
read from that named pipe.

Please note that you must use a value of 141 as the link type when  
writing
the data.

Best regards
Michael

On Jun 25, 2005, at 8:31 PM, Thomas Steffen wrote:

> On 6/25/05, Michael Tuexen <Michael.Tuexen@xxxxxxxxxxxxxxxxx> wrote:
>
> > But you
> > can read files in libpcap format which contain MTP2 frames or
> > MTP3 frames. You can also read from a pipe. Does that help?
>
> Thanks for the hint. Yes, MT3 frames should be possible (not that
> difficult :-)).
>
> How do I read from a pipe? I have found it mentioned a few times, but
> I couldn't figure out how to do it. I would use netcat to get the
> data, so how do I create a pipe between netcat and ethereal?
>
> Thomas