Parsing Raw IP PCAP files

[devanenWl]

Hello,

I've been trying to use PacketQ on PCAP files generated with ulogd2. Since these files are in Raw IP format (without L2 information), PacketQ is not able to parse them correctly.

I've been able to parse the PCAP files generated by manually adding L2 information in the PCAP file with tcprewrite (part of the tcpreplay package on Debian), using the following command :

tcprewrite --dlt=enet --enet-dmac=01:23:45:67:89:ab --enet-smac=fe:dc:ba:98:76:54 --infile=dns_input.pcap --outfile=dns_output.pcap

Could you please look into adding support for Raw IP PCAP files ?

Thanks.