Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: [Wireshark-users] Variable decoding depth

From: "Marc Lebas" <mlebas@xxxxxxxxxx>
Date: Mon, 23 Feb 2009 13:48:26 -0000
Title: Variable decoding depth

Hi everybody,

I use Wireshark 1.0.6 for GPRS over Frame Relay and i got different depth in decoding, depending on the capture file format :

With rf5, the analysis is limited to GPRS protocol layers, but never decode IP which is the encapsulated protocol.
With libpcap, it is OK;  Wireshark go deeper as it is able to decode encapsulated IP frames in GPRS frames.

Why such a behaviour ? Did i missed something in my config ?

Here is my config on Linux (but the issue is the same on Windows) :

- preferences :  fr.encap: GPRS Network Service
- cat k12_protos : "gprs_gb","fr"

Marc