["Small, James" <JSmall@xxxxxxxxxxxx>]

Bill,

I don't believe there is in Wireshark.  You have to change the datalink
type in the capture file and then setup custom offsets as I described.
Did you try this and have any luck?

--Jim

> -----Original Message-----
> Can anyone follow up with me on this, is there a way to force a offset
> so wireshark will start decoing 56 bytes inside the frame and assume
it
> to be a protocol like IP.
> 
> Thanks
> 
> Bill
>