User Guide

9.9. User DLTs protocol table
When a pcap file uses one of the user DLTs (147 to 162) wireshark uses this table to know which
protocol(s) to use for each user DLT.
This table is handled by an Section 9.6, “User Table” with the following fields.
encap one of the user dlts.
payload_proto This is the name of the payload protocol (the lowest layer in the packet data).
header_size if there is a header protocol (before the payload protocol) this tells which size
this header is. A value of 0 disables the header protocol.
header_proto The name of the header protocol to be used (uses "data" as default).
trailer_size if there is a trailer protocol (after the payload protocol) this tells which size
this trailer is. A value of 0 disables the trailer protocol.
trailer_proto The name of the trailer protocol to be used (uses "data" as default).
Customizing Wireshark
171