sngrep icon indicating copy to clipboard operation
sngrep copied to clipboard
verified publisher icon irontec

support for GRE protocol

Open michael2009 opened this issue 7 years ago • 2 comments

sngrep -I refer-wrong call ID.pcapng But no any call show at flow list.

refer-wrong call ID.zip

michael2009 avatar May 12 '18 15:05 michael2009

Hi @michael2009 !

The problem with the attached pcap is that packets are encapsulated using GRE which is not supported by sngrep.

gre

As far as I know, stripping GRE is not as easy as skipping a couple of bytes, so most probably this won't be implemented, but maybe there are tools that decapsulates the pcap file.

Regards!

Kaian avatar May 14 '18 17:05 Kaian

@michael2009 could you try ipdecap

sergey-safarov avatar Apr 29 '21 07:04 sergey-safarov