Is it possible to "reapply" a certain protocol pattern to an incoming or outgoing data? For example, if Wireshark sees that a frame has a protocol type of 0x0800, it will cast the frame into an IPv4 packet.
I'm working with a driver that resets the protocol type to 0xdddd to bypass the default TCP/IP stack. Now I'm trying to debug the sending and receiving by viewing the packets in Wireshark, but since Wireshark doesn't recognize the 0xdddd protocol type, I can't view the contents of the packet. So is there away to apply the 0x0800 or IPv4 "pattern" to an 0xdddd protocol type frame as well?
Also, are there any good forums out there dedicated to Wireshark?
I'm working with a driver that resets the protocol type to 0xdddd to bypass the default TCP/IP stack. Now I'm trying to debug the sending and receiving by viewing the packets in Wireshark, but since Wireshark doesn't recognize the 0xdddd protocol type, I can't view the contents of the packet. So is there away to apply the 0x0800 or IPv4 "pattern" to an 0xdddd protocol type frame as well?
Also, are there any good forums out there dedicated to Wireshark?
Facebook
Twitter