Wireshark · Wireshark-dev: Re: [Wireshark-dev] NetXRay 2.2 fileformat

[Guy Harris <guy@xxxxxxxxxxxx>]

Stig Bj�rlykke wrote:

> I have a NetXRay 2.2 capture with some LAPB/X.25 traffic.  The data is
> shown correct, but all frames have 4 bytes extra which wireshark tries
> to dissect without any luck.  Can this 4 bytes belong to the capture
> format?

Do those 4 bytes show up at the beginning, or the end, of the frame? 
For some frame types, we find either 4 bytes of FCS or 4 bytes of junk 
at the end of the frame.

Could you provide the capture file?