Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 4670] Netmon capture containing ESP packets breaks decode

Date: Tue, 11 May 2010 07:22:21 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4670

Jeff Morriss <jeff.morriss.ws@xxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |jeff.morriss.ws@xxxxxxxxx

--- Comment #1 from Jeff Morriss <jeff.morriss.ws@xxxxxxxxx> 2010-05-11 07:22:20 PDT ---
It looks like this was changed in rev 31213 with the comment that NetMon file
version 2.1+ uses per-packet encapsulation.  That's interesting because the
per-record header (netmonrec_2_x_hdr) doesn't include an encapsulation field. 
Where is the per-record encapsulation supposed to come from?

This file appears to be version 2.2 .

Steve, any thoughts?

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.