Wireshark · Wireshark-dev: Re: [Wireshark-dev] How to add a wtap encapsulation?

[Christopher Maynard <Chris.Maynard@xxxxxxxxx>]

Yo Mismo <iokeze@...> writes:

> I have added it (#define WTAP_ENCAP_XXX   127)

I don't know if this is your problem or not, but there's already a wiretap
encapsulation defined as 127:

#define WTAP_ENCAP_IEEE802_15_4_NOFCS		127

You might also want to have a look at wiretap/pcap-common.c, especially the
"Note" about what to do if you need a new encapsulation type for libpcap files.