Wireshark · Wireshark-users: Re: [Wireshark-users] Nettl HP-UX

[Andrej van der Zee <andrejvanderzee@xxxxxxxxx>]

>
> The short-term workaround would be to modify editcap to map some of the WTAP_ENCAP_NETTL_ encapsulations to equivalent encapsulations supported by pcap/pcap-ng, and to discard the nettl pseudo-header information.

I just found the nettl files I am facing have packets with two
different encapsulation types:
* Ethernet with nettl headers
* Raw IP with nettl headers

Is there a way to convert either Ethernet to Raw IP or visa versa so
that I end up with one encapsulation type?

Thank you,
Andrej