(Note: You would need to have the header class defined according to IBM's specifications.) 4. Check for Corruption
An improved version that includes more robust interface identification and protocol information, allowing for better multi-interface captures. redmine.openinfosecfoundation.org If you'd like, I can help you: specific command to update your OS version. conversion scripts to turn SLL2 files into standard PCAPs. Check if a specific security tool you use has a patch for this. -pcap network type 276 unknown or unsupported-
: Use the Wireshark Stable PPA to get a newer version than what is in the standard LTS repositories. (Note: You would need to have the header
-pcap network type 276 unknown or unsupported- conversion scripts to turn SLL2 files into standard PCAPs
I suspect the issue is that the PCAP header contains a Link-Layer Type value of 276 , which my current version of Wireshark does not recognize. I have tried updating to the latest stable release but the error persists.
If you only need to look at the payload and don't care about the SCLP headers, you can try converting the file using editcap (a command-line tool bundled with Wireshark).